74c812f8993210c8c73b86eaf687e446_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74c812f8993210c8c73b86eaf687e446_JaffaCakes118
Size

24KB
MD5

74c812f8993210c8c73b86eaf687e446
SHA1

c4c5a62d6f2dcda17af6de4f80e81628784e8fa6
SHA256

d0c70ea1c43941ae3e9d175fa130ec77cfe7f226295420ae39e90ec543d1b339
SHA512

dbe0d676ff92f70587d1d47e46ba914c76558f6f5c95a013060fdaec3f51fd958b6fd8a65a9a75a0c70e241f34a75b2bad3d9ea650bd79e6cbcf180de3ac5221
SSDEEP

192:gKVFR5IAqO1TKee2MHR8cKdbqe29UsNWsP1oyLKQ9Z1:gOFRzqgBex2cKpXsN311

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74c812f8993210c8c73b86eaf687e446_JaffaCakes118

Files

74c812f8993210c8c73b86eaf687e446_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe735825e0d3bbf2035f8bf948456c99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateProcessA
CreateFileA
GetStartupInfoA
GetModuleHandleA

advapi32

RegSetValueExA
RegOpenKeyA
RegCreateKeyA
RegCloseKey

shell32

SHGetSpecialFolderPathA

wininet

InternetQueryDataAvailable
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
printf
ldiv
isxdigit
isupper
isspace
ispunct
isprint
islower
isgraph
isdigit
sprintf
rand
srand
time
_except_handler3
atol
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_itoa

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ