e9ff31e79f36b1ad5abd97060ec432ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9ff31e79f36b1ad5abd97060ec432ea_JaffaCakes118
Size

64KB
MD5

e9ff31e79f36b1ad5abd97060ec432ea
SHA1

542c91f9c1266dece40cab0e49fe6af1fe5a0ee5
SHA256

88baad35ac3f3873d2f14df8df614e8d27c3cf77671ca25f7be6ba020d072922
SHA512

095a7b6f284a9fb17007de25a6b977fdcfc7706f33d713b68427601a3b9a9322bc18ac8c756d6d86c7e40fbf61b563d81f957e772bf573aa6232315045c20923
SSDEEP

1536:oaMPa734UU0pHm/UKq2ognKkB3NgJmcxpd3sV:oaMPaxUiHm/bqEKmWmczd3sV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9ff31e79f36b1ad5abd97060ec432ea_JaffaCakes118

Files

e9ff31e79f36b1ad5abd97060ec432ea_JaffaCakes118
.exe windows:1 windows x86 arch:x86

9c0050334da711b5147027326c52827d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
GetTickCount
GetWindowsDirectoryA
CopyFileA
LocalAlloc
LocalFree
CreateFileA
ReadFile
RtlUnwind
WinExec
WriteFile
DeleteFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

crtdll

__GetMainArgs
exit
memcpy
memset
printf
raise
signal
strcat
strchr
strlen
strncpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ieoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ