560f4efff9c43d3242687cb1e14b7a92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

560f4efff9c43d3242687cb1e14b7a92_JaffaCakes118
Size

17KB
MD5

560f4efff9c43d3242687cb1e14b7a92
SHA1

6bed5cd6b05358f393607ef4e363e1bddb88d464
SHA256

02afe0a8c0673e290ec134ceec4d976c0f270ceba01a9ab0d2c35a46760e8875
SHA512

0835366852fd5a32bf67609d6d6252bc6166c9194c879b27eb07f8a7cf2081ed8deeef0156bb02bfd80a8bf49126b4dd4f8a34b05ecf44004397b0ed7870ffe5
SSDEEP

384:QFpsY5kqScmZO2Zp+Nye8pqrmub8TyztsDN:QbqqSoKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
560f4efff9c43d3242687cb1e14b7a92_JaffaCakes118

Files

560f4efff9c43d3242687cb1e14b7a92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE