77c40217bba53cddceca4883d0cd749b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77c40217bba53cddceca4883d0cd749b_JaffaCakes118
Size

27KB
MD5

77c40217bba53cddceca4883d0cd749b
SHA1

cf84eafedac483340361f82e9e04cfedfe9d60f9
SHA256

dc153fbe0aa0115579f61c7a1885c4a41f05a7eaf63cb8284c097fc60ed6bc0f
SHA512

ced18b5683a9fdf56951376225b099c14b89d4e4f23559032e02822949be685d3ee81f69e1ac64b648f1064efbcc9bfeea2f944b04783584cb65e25eee81fd6f
SSDEEP

384:8fMiJv/RHKZ10BnrmAiNB4bIzNpkHuXVbaXp0EbOpLXpy3YGXZGsUuGB/xJ+0mxP:TiZYn0pm5aulboB+XuZGjNJ+tY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77c40217bba53cddceca4883d0cd749b_JaffaCakes118

Files

77c40217bba53cddceca4883d0cd749b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

622cd7865c4ea67c8995f8aa949fc5c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
DeleteFileA
SizeofResource
FreeResource
LockResource
LoadResource
FindResourceA
CloseHandle
MultiByteToWideChar
GetSystemDirectoryA
FindFirstFileA
CreateProcessA
SetFileAttributesA
GetFileSize
ReadFile
WriteFile
GetModuleHandleA
GetStartupInfoA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize
CoCreateInstance

msvcrt

_initterm
_controlfp
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
__p___argc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ