32735f03a46bf6c7f76cc93e366caf8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32735f03a46bf6c7f76cc93e366caf8d_JaffaCakes118
Size

22KB
MD5

32735f03a46bf6c7f76cc93e366caf8d
SHA1

6760c22fcdbeae245d03442b2b2b20e2d44f57ef
SHA256

61ae1cd8e0f38d0cb47dbe48b3d505955b21292025b063598ad628f6cccb63f0
SHA512

cdf80240ce4ae20db7da439c83ac9c1a4f8ef03810c80db454a822af74736799c8ba65a40cf43e7eee72c3fb2e4c68be65cfd16b2fb475fd917e32779c462a2f
SSDEEP

192:deRHguuYIcKy6mLniHfu/33IhGBM6/dK2+JbuZjWa54vyr5Pz3CDV:dgxKAnMu/nISI1JKgZK9PzSp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32735f03a46bf6c7f76cc93e366caf8d_JaffaCakes118

Files

32735f03a46bf6c7f76cc93e366caf8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

164759b5432d146f30fdba9e1ded94d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

AddAtomA
AllocConsole
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
fputc
fputs
free
malloc
signal
strlen

user32

FindWindowA
GetAsyncKeyState
ShowWindow

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE