34a4da0347a31cabb33f886bc63453ed_JaffaCakes118 | Triage

Sharing

General

Target

34a4da0347a31cabb33f886bc63453ed_JaffaCakes118
Size

24KB
MD5

34a4da0347a31cabb33f886bc63453ed
SHA1

c10259b95e17c84e60eab98cec4491e3fd6bc131
SHA256

9e2d9de970935307777a4b4a3984ee43192d36f7fa051f14ab1a1acca04c1d23
SHA512

f6d1631a2fc5497e2d6321603e31063747dfbfaa6ff60a4dabe959c6e77a6b93fd6afdf64987fa50a0e4b0d44a18aff520a4fcc7f8b1b3a4de0c996bc687f8f9
SSDEEP

192:6UXEC5TR8T95R7vO9T6fxbU3tPXarsNHsP1oy7LlKQ9Z1:9UC5TCXlvOl6fxzsNS1VB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34a4da0347a31cabb33f886bc63453ed_JaffaCakes118

Files

34a4da0347a31cabb33f886bc63453ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61184408f5b143d987b44c36a4de25d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateProcessA
CreateFileA
GetStartupInfoA
GetModuleHandleA

advapi32

RegSetValueExA
RegOpenKeyA
RegCreateKeyA
RegCloseKey

shell32

SHGetSpecialFolderPathA

wininet

InternetQueryDataAvailable
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
printf
ldiv
isxdigit
isupper
isspace
ispunct
isprint
islower
isgraph
isdigit
sprintf
rand
srand
time
isalpha
isalnum
div
ceil
atoi
_except_handler3
atol
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_itoa

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ