55d89c228b7131cf1748241ff4f44691_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55d89c228b7131cf1748241ff4f44691_JaffaCakes118
Size

8KB
MD5

55d89c228b7131cf1748241ff4f44691
SHA1

ff9a1a6f1d83e08f56fc54804b96479c10fb4ac4
SHA256

6a0bfcca3b07cf35d45fe9d09251f245478271fcdc71db16287aa75eda9b09ba
SHA512

adccc40358c534f5b8f85978de28a0fad06086fc5180066d0612da345ec9259991718994856cb8df3f966b43eefe328bb28b86530aeb5f27121bca1a587b0e5b
SSDEEP

192:papiSmSeqO6Im/tPfI67fZf1iiUsdSLRLdVP1oynVWD:Gi0e0Iq9NiiOB1/WD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55d89c228b7131cf1748241ff4f44691_JaffaCakes118

Files

55d89c228b7131cf1748241ff4f44691_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4cddb0e81d3ac529ea817dcfad884a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

msi

ord67
ord204
ord112

user32

CharToOemA

shell32

SHGetSpecialFolderPathA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
??3@YAXPAX@Z
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??2@YAPAXI@Z
_findfirst
sprintf
_findclose
_vsnprintf
isspace
_initterm

kernel32

GetStartupInfoA
GetModuleHandleA
DeleteFileA
CreateMutexA
GetLastError
WriteFile
GetTempPathA
SetCurrentDirectoryA
CreateFileA
OutputDebugStringA
CreateProcessA
WaitForSingleObject
CloseHandle
Sleep

Sections

.text
Size: 7KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE