3ae34972f56080f86c984c3fb803c129_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ae34972f56080f86c984c3fb803c129_JaffaCakes118
Size

22KB
MD5

3ae34972f56080f86c984c3fb803c129
SHA1

860a6014a0a50b007a18b3dba8a76c5f41ca87c9
SHA256

b3592c3db51b69ccaaeb527a0c472b099dd84b2e4255201a43fb8ebda570bfe1
SHA512

d3275f58e5adf16a597e8957cbb58f652585575a574d47916e0066f841324806e3336901951f9e6e19e59b778f3bef2dd13c21f2c1356ed31cfb38255cfb44ab
SSDEEP

192:KGHmn44ibpkLLyGeu/SfzkHXkU2EkCpPmQV478Pwr5EztkuDS:m4Pweu/yzk/Rk+uQ7I9Eztr+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ae34972f56080f86c984c3fb803c129_JaffaCakes118

Files

3ae34972f56080f86c984c3fb803c129_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8c3da65d4300237bfd4a3487c866aad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCreateKeyA
RegSetValueExA

kernel32

AddAtomA
AllocConsole
ExitProcess
FindAtomA
GetAtomNameA
GetWindowsDirectoryA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
fputc
fputs
free
malloc
signal
strcat
strcpy
strlen

user32

FindWindowA
GetAsyncKeyState
ShowWindow

wininet

FtpPutFileA
InternetCloseHandle
InternetConnectA
InternetOpenA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE