5cc0bf87bbe803a82b3aeff9edc45c19_JaffaCakes118 | Triage

Sharing

General

Target

5cc0bf87bbe803a82b3aeff9edc45c19_JaffaCakes118
Size

11KB
MD5

5cc0bf87bbe803a82b3aeff9edc45c19
SHA1

2c99244b0c3c405045214b9757d0aa3862a81e6b
SHA256

0a88d285ffd9264c9616bc714980298de603725527c3822cf13cb5640c576145
SHA512

edf90e9cfb98f3c1248a9937b6b7af734d5a5772ac83f892e4cb0edd3f448f25fe7087d0f2ef8a33f1ee30f036af71384265b55803c8d31f6a572da1cca14e4b
SSDEEP

192:WiThgzBcTLiAjeAQOyfz+vCyRYusE/a4TjV4ooJppSQsDaM/OyK:xhuBc/j1/K0coobpSQzURK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cc0bf87bbe803a82b3aeff9edc45c19_JaffaCakes118

Files

5cc0bf87bbe803a82b3aeff9edc45c19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f381201f60664023e6bf7212f371e02e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr70

__p__fmode
__set_app_type
__p__commode
_onexit
_controlfp
_except_handler3
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_mbschr
_mbsicmp
_mbsrchr
strlen
_mbsncpy
_access
__dllonexit
isspace

kernel32

GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
_lopen
_lclose
_llseek
_lread
GetSystemDirectoryA
GetCurrentDirectoryA
lstrcpyA
lstrcatA
GetStartupInfoA

user32

MessageBoxA
LoadStringA
wsprintfA

advapi32

RegQueryValueA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ