4d409d611ca90a0e21c61a3d12b515e6_JaffaCakes118 | Triage

Sharing

General

Target

4d409d611ca90a0e21c61a3d12b515e6_JaffaCakes118
Size

64KB
MD5

4d409d611ca90a0e21c61a3d12b515e6
SHA1

c193323b8f298a3e52216eecc71012ec353b47ab
SHA256

d666ade26b0209f3167ea362bb13d59f500a217e0a900149dba59c4dedb21ffd
SHA512

f91bbed51541195c90b3c73e0707e4138e0f0d35bbe827f187aff78520f5296ae1cee167daba254fd086b1c7f8754157ba3763f7fbc5fc125d3afc47d3ba8e90
SSDEEP

1536:vlsUSV6MgDmmT0y//zxFZ3pE3C8lpzKwOw/UHHiauOWnqhk:vlsPgDmmT0ix1pyhUHCatWqh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d409d611ca90a0e21c61a3d12b515e6_JaffaCakes118

Files

4d409d611ca90a0e21c61a3d12b515e6_JaffaCakes118
.exe windows:1 windows x86 arch:x86

9c0050334da711b5147027326c52827d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
GetTickCount
GetWindowsDirectoryA
CopyFileA
LocalAlloc
LocalFree
CreateFileA
ReadFile
RtlUnwind
WinExec
WriteFile
DeleteFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

crtdll

__GetMainArgs
exit
memcpy
memset
printf
raise
signal
strcat
strchr
strlen
strncpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ieoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ