0d7a787355d2f1ecb90885df072efcef_JaffaCakes118 | Triage

Sharing

General

Target

0d7a787355d2f1ecb90885df072efcef_JaffaCakes118
Size

2.3MB
MD5

0d7a787355d2f1ecb90885df072efcef
SHA1

ace88584859f06e03040b4851fd7a0871f3dc5e9
SHA256

a92e969b52c1c84ca99a949c3f92e74a725030feec886aafc6d2e2aedc20886c
SHA512

395ad105056928bead911a095c150f0972f678115931539549a013cef62edeab2fd7afcad68a738fb6702034262dae56f0b9fe3e5b25bb2ab5aab12c4bfba21b
SSDEEP

49152:1bxLX3lOLrEABY33hIkcNSkCBK1AW9sby1RbsXWQ:JxLX//cRCBQA/X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d7a787355d2f1ecb90885df072efcef_JaffaCakes118

Files

0d7a787355d2f1ecb90885df072efcef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a94f588c4c587264a58a5ec8194d3aa6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
GetAtomNameW
FlushFileBuffers
GetProfileStringA
CompareStringA
SetEndOfFile
GetUserDefaultLangID
GetVersionExA
FileTimeToLocalFileTime
EnumResourceNamesA
GetFileType
GetVolumeInformationA
SearchPathA
FileTimeToSystemTime
IsDBCSLeadByte
GetFileTime
CreateHardLinkW
UnlockFile
LockFile
FindResourceExW
GetSystemDirectoryA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA

shlwapi

PathAddBackslashA

oleacc

LresultFromObject
CreateStdAccessibleObject

setupapi

InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

wininet

InternetOpenUrlA
InternetReadFile
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 6.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ