291498d4da44926d6ee0f52f5fca945a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

291498d4da44926d6ee0f52f5fca945a_JaffaCakes118
Size

826KB
MD5

291498d4da44926d6ee0f52f5fca945a
SHA1

1f339f6418babbdad6624584e09308253f11d47e
SHA256

0aae2876d4ce44f3a7d4f0f070631a892be2b826fe530b9fc18595ef3a5b8b01
SHA512

f2b829205794274dd80cde22aed0f39dfb0894940eb0e1e9c08f46e2b16e916fee0ca7759384bbc73917f1b2b4ae31723532af8b2c68ad84803865afd9b4bbe2
SSDEEP

24576:VGKRc6hLamdapcuQmV0ye5JqnvrYc7efQ+wiH:I6hLa62Cm+fizLafNV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291498d4da44926d6ee0f52f5fca945a_JaffaCakes118

Files

291498d4da44926d6ee0f52f5fca945a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

10802e69ed98cb7164c85d6411514ad8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetSystemDefaultLangID
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetProcAddress
LoadLibraryW
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedExchange
GetSystemTimeAsFileTime

shlwapi

SHDeleteKeyA

cfgmgr32

CM_Get_Depth_Ex

Sections

.text
Size: 414KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 400KB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ