3497b611ee77da2b06ae04b67ffb7fd4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3497b611ee77da2b06ae04b67ffb7fd4_JaffaCakes118
Size

35KB
MD5

3497b611ee77da2b06ae04b67ffb7fd4
SHA1

364626ee6168be27994bc54775aaf36bcabc4fb0
SHA256

ad71b28c00344a60102a6b996a961707e28f0d794f03aaf6e1bb79225304bb97
SHA512

631f1969f279efb519cbaccf538de95af8ffbd1b8be0bda4cdcb9319d9d7c22d5e3a418caee6a4be45201e4a43fc69419fc9ad09936d3594f9b0cb7915b39073
SSDEEP

192:DeHQbNSP1oynqUiA1DiJj4EUVjLI2SYrV7ONwI2eC+f2rZiJgzO5KSkQ:DeIN814UiA+3UVjLIQRcwJAerZiJG9Sz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3497b611ee77da2b06ae04b67ffb7fd4_JaffaCakes118

Files

3497b611ee77da2b06ae04b67ffb7fd4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cad34151d9588ae924ef14e2a3620233

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetModuleFileNameA
GetStartupInfoA

user32

wsprintfA

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA

msvcrt

_splitpath
_exit
_XcptFilter
exit
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 31KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE