fab901a1281a1ce7c2a1d507040b524e_JaffaCakes118 | Triage

Sharing

General

Target

fab901a1281a1ce7c2a1d507040b524e_JaffaCakes118
Size

45KB
MD5

fab901a1281a1ce7c2a1d507040b524e
SHA1

296f16d55075e8cdc7a0cbd9e048bef1d0fa72a9
SHA256

ede46dbefb7b187d4e65900d3bc8a4a09ae177284aa0d243cd4802ce0ffcf59e
SHA512

93cb4d305a40f2fb74770713d34fae6eb3f936327c0bd625bbc46260d59340fa02fb10214e21da95eea130514a61ba656e1e73343ec7cdcfbf946e73efef3d17
SSDEEP

384:O7/xkZK1Nx2hCXBMnJEm7cEa8B1Ccebj6L1PMC0/j+rzfz/pjxx2jve6Pyv1RY8P:O7/xNkC0Z7NjSEib/mz/pjm7y1RjZeI3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fab901a1281a1ce7c2a1d507040b524e_JaffaCakes118

Files

fab901a1281a1ce7c2a1d507040b524e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9951b490e5612a8727897cc16121279

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

kernel32

AddAtomA
CopyFileA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal

shell32

ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE