411f7e09effc2ec9cb23d98712a814dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

411f7e09effc2ec9cb23d98712a814dc_JaffaCakes118
Size

11KB
MD5

411f7e09effc2ec9cb23d98712a814dc
SHA1

27812235a2b5cc5231f1dbd18c02a0774ed3feb1
SHA256

c8c31b5dfcab14a60da83c646ab60c27221e84865a6243059e8cc06e7fd0ee6b
SHA512

f9f377b1127521094bc634d775250810b496a3c0c818db4d5b919a9a53760350a0b780f7966ab16ecefdc07b09e0481a17801b13a958120fabc9dc1d63bc023e
SSDEEP

96:rPOPuCEiGv8jFHahhFqFlp5ojXV0SdZMoWgVfCbp27:DskvwSqV5onXMJL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
411f7e09effc2ec9cb23d98712a814dc_JaffaCakes118

Files

411f7e09effc2ec9cb23d98712a814dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92a000ea4374c3e22a51fc6bd76430a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDoubleClickTime

shell32

ShellExecuteA

shlwapi

StrStrA
StrStrIA

kernel32

lstrlenA
lstrcpyA
CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetVersion
LoadLibraryA
lstrcatA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE