34ba3ca019c09efc9a6e476a93193016_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34ba3ca019c09efc9a6e476a93193016_JaffaCakes118
Size

124KB
MD5

34ba3ca019c09efc9a6e476a93193016
SHA1

c2a4ee61901cfcc23f66b25baf1c02b3f4123824
SHA256

31119540f6f3d1f1ae9afe8fdeef4f379697acccd218b4dcc9d3ec4d108ffee4
SHA512

bed6f7483f29a38b6a54f4c41de1bc4283ff8894ee21ce99831f776ac3d91fdad53ce9307555b820a3a2c27c8cc7e0dcc225aa6d3045ce1c0cb602865c2fcfb7
SSDEEP

384:yd3vPR3+2/bZ5sHTh6aOToqzvCm6tFu3WZk3t:yFP5bZ5+DOtz6tAJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34ba3ca019c09efc9a6e476a93193016_JaffaCakes118

Files

34ba3ca019c09efc9a6e476a93193016_JaffaCakes118
.exe windows:4 windows x86 arch:x86

794f720491cfb3bab7d3b7c35e78cd9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

fread
perror
malloc
fclose
sprintf
free
fopen
strspn
strcspn
fgets
fwrite
getenv
strncmp
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
printf
_iob
fprintf
exit
strchr
strrchr
_exit
_strdup
_stat

kernel32

QueryPerformanceFrequency
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
QueryPerformanceCounter

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lrdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE