e9021568126efbf584cd4e74cc757d03_JaffaCakes118 | Triage

Sharing

General

Target

e9021568126efbf584cd4e74cc757d03_JaffaCakes118
Size

31KB
MD5

e9021568126efbf584cd4e74cc757d03
SHA1

16cae5ec273aa49328b1d4368283a1dd4e46041a
SHA256

9d486157ebff380bf90a7577d2ac60d89630a90a11e58e3eed9d7f71d32b007a
SHA512

ce48860b14c79e8e7bcf937f3eebd9804446bc242c037befb5870334217fdb57b520591765633deda4a194ba286c1b11946ecf3d88a6beb3a24c55d2e3e54c64
SSDEEP

768:h/tbOujP9/VxUTgGA1Lo8w/9+K1isccgOTcw:Tlb9/VxUvOM9Liz+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9021568126efbf584cd4e74cc757d03_JaffaCakes118

Files

e9021568126efbf584cd4e74cc757d03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3769a62a90e5babda27e69930c27a315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetStartupInfoA

shlwapi

SHDeleteKeyA

msvcrt

exit
free
strcat
strcpy
calloc
strlen
fclose
fwrite
fopen
malloc
strcmp
memcpy
_XcptFilter
_exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ