51ee8449b6bb19cf0321023ce873702a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51ee8449b6bb19cf0321023ce873702a_JaffaCakes118
Size

27KB
MD5

51ee8449b6bb19cf0321023ce873702a
SHA1

56f9fed4c777fad6a1f7c3ed8ed6a2004bfe140c
SHA256

c5ed6bd71480453a11e87dcacc7bd5c7f9bb841ccc13773d48d6a9e06e39cc37
SHA512

2708dca7e9c30e5108d167fd219611559c3b335d996683e2fb8730aef491b2f0c1f66ec67dac4565b8d241c0d2f25844b94e9da6abfdb67556dd7b4e952e8bc3
SSDEEP

768:bhed9m8QXqmhk0P2d/5HoKN9tE6YTT0MBMp6PNPMQN+BzZ2:Fedw82hpPQH5Nv/mT0I+RZ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51ee8449b6bb19cf0321023ce873702a_JaffaCakes118

Files

51ee8449b6bb19cf0321023ce873702a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1754775a7a498cb5eaa92aca8d20b06f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
WriteFile
ReadFile
SetEndOfFile
CloseHandle
GetModuleHandleA
SetFileTime
GetTempPathA
GetTempFileNameA
Sleep
GetProcAddress
HeapAlloc
GetSystemDirectoryA
GetProcessHeap

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey

shell32

SHGetSpecialFolderPathA

ole32

CoCreateGuid

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ