0f957094693616c47b6d3e458b3d2481_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f957094693616c47b6d3e458b3d2481_JaffaCakes118
Size

67KB
MD5

0f957094693616c47b6d3e458b3d2481
SHA1

07e9fe80c1c4dd5745e8ff9e55d6ad73cbcef278
SHA256

1d2f41533c73bc342e9595ca4c2ff9701aaa04c3bb3b0f82f392cd62745c96d7
SHA512

abf4e4e1255caba92d627ef3f4cd5d90c03c52d0e063251a49d9cd048a359ab5ac45d0e0726f405128eaa65ff2b33ff09761ff271ae3baf0733173dc88224dd9
SSDEEP

768:l6Po8W02o2zHvGziTkS1q4S9n/gzhdTkMy/qPrV+aKUj0Zp86M06eI92YRhZ1OKq:MPt2z+70JStYbf+GeO6u2kZMK1K8U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f957094693616c47b6d3e458b3d2481_JaffaCakes118

Files

0f957094693616c47b6d3e458b3d2481_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1aad4f8865e5a2850f75bb59bd537f75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrcmpA
GetModuleFileNameA
GetStartupInfoA

advapi32

RegOpenKeyExA

msvcrt

fread
ftell
fseek
fopen
strcat
strcpy
calloc
_exit
fclose
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_stricmp

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ