d1b9ebcd9a52a4f9fc6e78cb5f9a1fda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1b9ebcd9a52a4f9fc6e78cb5f9a1fda_JaffaCakes118
Size

64KB
MD5

d1b9ebcd9a52a4f9fc6e78cb5f9a1fda
SHA1

60bfcbe80b99f86afc1949fd614a2516473063f8
SHA256

148c257935b96594514513fec2a5f75b9f38549137a9eb7c68fd6b4094213a2f
SHA512

516d29df9b6728e6cf4864e85c7eed4085b1ddee7cf83cc3abc8302fa49d649b54d19d99a70417db58c85c95372cea5bb82e9be160c46c1cdb10b47ce820e4ec
SSDEEP

1536:bEzDbg91I9QvEM+F6F38Ixii4yjc9vo33QCmiqhy:GynETFO38Ixv4PZo33HX0y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1b9ebcd9a52a4f9fc6e78cb5f9a1fda_JaffaCakes118

Files

d1b9ebcd9a52a4f9fc6e78cb5f9a1fda_JaffaCakes118
.exe windows:1 windows x86 arch:x86

9c0050334da711b5147027326c52827d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
GetTickCount
GetWindowsDirectoryA
CopyFileA
LocalAlloc
LocalFree
CreateFileA
ReadFile
RtlUnwind
WinExec
WriteFile
DeleteFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

crtdll

__GetMainArgs
exit
memcpy
memset
printf
raise
signal
strcat
strchr
strlen
strncpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ieoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ