d375011276a4bf0ad84158181b0d6497_JaffaCakes118 | Triage

Sharing

General

Target

d375011276a4bf0ad84158181b0d6497_JaffaCakes118
Size

178KB
MD5

d375011276a4bf0ad84158181b0d6497
SHA1

7c81411ebe9f2ed35c24623203bceceb05bb2eea
SHA256

18bfca8e9eb8c9b7490d6cc44969fd0c1fea5f752ce2166a7743794804533be9
SHA512

56427af6254bad9673f4fa5d25b8a59a31728fa4e384559a14e16ee8725f84ad00b95a9c6bcf0e1d7a1f90de1da09c5227d545ef2a443f5950c6e7f2f720fcb7
SSDEEP

3072:J3Qv9+YORtMFRGW4eduMrMG/1TeMUoBfGabLmlh9BYPbkXwihCxlLkY08D0Xv449:as/7MF94egMrMsdeM1Ma/mr9CP/vJD+1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d375011276a4bf0ad84158181b0d6497_JaffaCakes118

Files

d375011276a4bf0ad84158181b0d6497_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c8738c9337d04b960e1a48c6acfddb6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW

rpcrt4

NdrFixedArrayFree
UuidCreate

advapi32

RegEnumKeyExA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA

shell32

Shell_NotifyIconA

kernel32

FlushInstructionCache
GetModuleFileNameW
UnmapViewOfFile
FindResourceExA
EnumResourceNamesW
OpenWaitableTimerW
MapViewOfFile
FindFirstFileA
DuplicateHandle
FindClose

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ