136d5c55cdbb3d8f27a93b9a117b434b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

136d5c55cdbb3d8f27a93b9a117b434b_JaffaCakes118
Size

24KB
MD5

136d5c55cdbb3d8f27a93b9a117b434b
SHA1

5fac9f1a4891b35facab64aa3e1acfbc5c5d12cc
SHA256

c05947bf2357b2e1ef09348de8d08f0a4adf0f0804a883e3d0379ea7d6f8cbb8
SHA512

53c081c002379dfec1a1f7d84d82b12d1d35e0166a1a665f4905b9d6d263477a8ad9546139d4586cad06d320103e543996271ff7c348ac170a732b567e46d792
SSDEEP

384:G1K2P8FCoW/v8qY6A7H73F++sVlvX+wVw38:iKW87c8CAD73jwWM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
136d5c55cdbb3d8f27a93b9a117b434b_JaffaCakes118

Files

136d5c55cdbb3d8f27a93b9a117b434b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

756ea1c7bf8120bc6cc377b5a78a708f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

ole32

CoUninitialize
CoInitialize
CoCreateInstance

kernel32

ExitProcess
GetVersion
GetFileSize
CreateFileA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
VirtualFree
MoveFileExA
ReadFile
Sleep
VirtualAlloc
GetLocalTime
WriteConsoleA
WriteFile
CloseHandle

sfc

SfcIsFileProtected

advapi32

RegOpenKeyA
RegCloseKey
RegEnumValueA

imagehlp

CheckSumMappedFile

shell32

ShellExecuteA

user32

CharToOemA

Sections

CODE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ