00dad1e3a8341070d74c4abab9a1b2b9_JaffaCakes118 | Triage

Sharing

General

Target

00dad1e3a8341070d74c4abab9a1b2b9_JaffaCakes118
Size

22KB
MD5

00dad1e3a8341070d74c4abab9a1b2b9
SHA1

267256d13621487a31632258c65a7521c22c83e3
SHA256

8ba18af196767fee784954de9bd5925ac8cc1db64aba85c43aa8719044af1a8c
SHA512

f4552d91c506562732ae510f3435e7a0a5fe285c51651c7c26cf27a5c7e9150f45f2ed46eb9a6ba01f4ce3c9c053bbe252105011ae53910cfa9f3198c4f63a1d
SSDEEP

192:0hH9Gpgwm+KHEtCTdqkyqQfnUHKEfSrE1lx2g4mj3pxpFECDT:npgL+ZCTd1ySfSI1791xpFj3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00dad1e3a8341070d74c4abab9a1b2b9_JaffaCakes118

Files

00dad1e3a8341070d74c4abab9a1b2b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9322a731667928a3e0d2bbe2aaeecd55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyA
RegSetValueExA

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetWindowsDirectoryA
SetUnhandledExceptionFilter
WinExec

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
fclose
fflush
fopen
fprintf
free
fwrite
malloc
memcpy
signal
strcpy
strlen

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE