347750ffc197d6edb875c1b947f94f9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

347750ffc197d6edb875c1b947f94f9c_JaffaCakes118
Size

90KB
MD5

347750ffc197d6edb875c1b947f94f9c
SHA1

d5cedd7d1237b173cfe44ff2128034c6ab4682b1
SHA256

b9b9e04c9dee902e2c658a7d59dbf9777b712ff195d43252da95b4be32892d53
SHA512

a568f40f0c904ddfee15a3168388f2335845918c4e21b44cb3ece1ddd69706d588400fa946ad0778af010fc42682f39c4f73bac2b07d56e048d8f5e382260b61
SSDEEP

1536:C3pt0ADn3lFDrRmdQg5tiNvAA7dAUMbRtCmYnfBZe+lbDN5SyBH3u:fAL3PtOtiht7dAU0RUnnfne+9SyBH+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
347750ffc197d6edb875c1b947f94f9c_JaffaCakes118

Files

347750ffc197d6edb875c1b947f94f9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd2adebaa94ddc00590f8f0a040fa39e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
CreateFileA
ExitProcess
GetModuleFileNameA
GetFileSize
ReadFile
Sleep
CloseHandle
GetStartupInfoA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA

msvcrt

malloc
strlen
free
strcpy
memset
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
realloc

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ