43730ae1c64e8d2b9d605c2b8befa693_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43730ae1c64e8d2b9d605c2b8befa693_JaffaCakes118
Size

5KB
MD5

43730ae1c64e8d2b9d605c2b8befa693
SHA1

7a3e369223e997686518261db027f80edea19cc8
SHA256

ea14ce864373af8b1aef0020e7cde7a65c93d9b2a4c072aa01a14ee466e041f9
SHA512

fdd725f63a2ef64a4f079f8de6b0ecb27c04b648a9f0a4fcebea639d1deb21a6f711cd05a4ca426dab41774509d34ae67e96f12790d38c067625779677e1129f
SSDEEP

96:DSkT15l4s/xpm+F2diNJO24o/ySIMOo2W27279WNUoyn:lt4N+0dUO2Jt3BU27wNUoyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43730ae1c64e8d2b9d605c2b8befa693_JaffaCakes118

Files

43730ae1c64e8d2b9d605c2b8befa693_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1057f8557c9f87ddba67ab7e3b34dfea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

user32

CharLowerA

advapi32

RegCloseKey
RegOpenKeyA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

wininet

InternetGetConnectedState

kernel32

LoadLibraryA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
lstrcpyA
GetSystemDirectoryA
lstrlenA
CloseHandle
Process32Next
lstrcmpA
Process32First
CreateToolhelp32Snapshot
SetFileAttributesA
Sleep
WinExec
CopyFileA
DeleteFileA
GetStartupInfoA
lstrcatA

msvcrt

_initterm
__set_app_type
_controlfp
strrchr
exit
_exit
_XcptFilter
_acmdln
__getmainargs
__p__fmode
__setusermatherr
_adjust_fdiv
__p__commode
_except_handler3

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE