2974ddf999705c0b1cd5bda17e91e71c_JaffaCakes118 | Triage

Sharing

General

Target

2974ddf999705c0b1cd5bda17e91e71c_JaffaCakes118
Size

16KB
MD5

2974ddf999705c0b1cd5bda17e91e71c
SHA1

e38a68cc546354c6689f9a6b1bafd96a9cb8e455
SHA256

28976e9421b28b6bb5cd4e1fd2680640a45644e8aea88559f1622b99639f38c7
SHA512

7eaba418e34f86cc3c7c906940e3e63e73ca234888de8a08420fb29d39f13c5456505a2e71e74b3cfd45626ddd48867f9a5310df7e5a0d60c67c5180b5db7eb0
SSDEEP

24:e1GSr6iqdH6U2XB7rtIQ08NNfqjTf/traxZ+pAWqPtbo/jGlKGywNbJT:Sr6ie187BdTNqT/tIZ+wPtboyl1X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2974ddf999705c0b1cd5bda17e91e71c_JaffaCakes118

Files

2974ddf999705c0b1cd5bda17e91e71c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a49dda5066fda8acb8e1ed5b85fad62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey

msvcrt

exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
strlen
__setusermatherr

kernel32

GetStartupInfoA
GetModuleHandleA

Sections

.text
Size: 4KB - Virtual size: 572B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE