6a93238ab39227f0b297b1cad0882b2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a93238ab39227f0b297b1cad0882b2e_JaffaCakes118
Size

46KB
MD5

6a93238ab39227f0b297b1cad0882b2e
SHA1

ab1c55640fcb292dc162abb58106dbcab2e27531
SHA256

6bdfac2d7cd1e982516aac4be9d04b162505ed6502942c887aa713033de212f3
SHA512

d5594054534cfcd9e2d17078b9035073cfd352af212087ec05d2edbf43bda20add65c221b8ed5d28094f48dc40b677047feb3277a648e6572d77771eef166da9
SSDEEP

768:NEJVQdx3Qa/v7zsMWQEK+oSMS7i1vhoi56du8MIV8cNZHIkN4BX:NEJSd9LLX7+oSMuikbdBNNZHIkN4BX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a93238ab39227f0b297b1cad0882b2e_JaffaCakes118

Files

6a93238ab39227f0b297b1cad0882b2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62864306c931c58c13831e9ef9e20215

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
calloc
__p__commode

kernel32

GetStartupInfoA
GetModuleHandleA

Sections

.rdata
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ