331d2c754e2d6ee3ebac3a403c37db90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

331d2c754e2d6ee3ebac3a403c37db90_JaffaCakes118
Size

64KB
MD5

331d2c754e2d6ee3ebac3a403c37db90
SHA1

f80e2cd8ff2d80a144a0674beeb705bebef09bd0
SHA256

29baafc477c3864d9b756945299a6e82543c2e4448eca88eb42e657c79e75f57
SHA512

296059e5ecb0eabf00660b4c8cac4402175788df56330aeee252f717e7b9e1a89e845575909145cf712b9999caa0efb0397c38fe92596b35171c70d6784b6e82
SSDEEP

768:ipfovpuG9n5cInQdcefheLS9eaQu2/xaUDYOxEyHEdbE6:ipfoganGInihee9eaQu2cUDYitEdb9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
331d2c754e2d6ee3ebac3a403c37db90_JaffaCakes118

Files

331d2c754e2d6ee3ebac3a403c37db90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d19c35bfc4cce490671743f1ba2eb7b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetLastError
GetProcAddress
LoadLibraryA
GetStartupInfoA
GetModuleHandleA

advapi32

RegEnumValueA

msvcrt

_controlfp
??3@YAXPAX@Z
sprintf
__CxxFrameHandler
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ