f52850153a9b1b339ebc4b44ebc17937_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f52850153a9b1b339ebc4b44ebc17937_JaffaCakes118
Size

43KB
MD5

f52850153a9b1b339ebc4b44ebc17937
SHA1

7e790d5fe1d1cbd416e460749e90f23f2cafaf94
SHA256

90f33251cc47ce9cbd498b0b60a2f796f73b5d1087cd53a569f2d1e326b57a41
SHA512

0830ea59b1c49feb015dcb16fca40096aa14ca7fdb8fcd572acffe772e6126345a135f0f85dd2dd1fb486a817a57bb3d094280cf6bb61afe072122d7bf791dea
SSDEEP

768:Fh39hlNIzRmT5Qu1KomBynzLM0y9rJ59eB:vNnNI9mOu1SwY9rJ5QB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f52850153a9b1b339ebc4b44ebc17937_JaffaCakes118

Files

f52850153a9b1b339ebc4b44ebc17937_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01b80b4dbe0d78c3565ff076b9b88ecd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetStartupInfoA

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_controlfp
_exit
_except_handler3
free
calloc
_adjust_fdiv

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE