850ade2ab2eac412d17633d0d1541830_JaffaCakes118 | Triage

Sharing

General

Target

850ade2ab2eac412d17633d0d1541830_JaffaCakes118
Size

28KB
MD5

850ade2ab2eac412d17633d0d1541830
SHA1

7864d53c8688fdd430f1365984a6191010533e5d
SHA256

2241442a974dd8c72aa54cfff948206f8d002233b68497e5e6e35d60e3c8025d
SHA512

2c6a524763d62f24057bdd827651112f6c8624fbb3a1c7f11248070aa4d4624737740a163f2c0a2d642ac2c1c78501f4408451c80d809dd8b48be83de10dcf71
SSDEEP

384:wqT0IWiNAZ7wDp/uc5dUyg84f8cDPQTbW7OpeWvM:wuxRXD4cHUxrD0R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
850ade2ab2eac412d17633d0d1541830_JaffaCakes118

Files

850ade2ab2eac412d17633d0d1541830_JaffaCakes118
.exe windows:4 windows x86 arch:x86

320bb9fce5407ca0e9b96130620228b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
__getmainargs
_initterm
_XcptFilter
_exit
__p___initenv
sprintf
__set_app_type
_except_handler3
_controlfp
_onexit
__dllonexit
__setusermatherr
_mbsrchr
strlen
strcpy
strncat
_purecall
_stricmp
??2@YAPAXI@Z
__p__fmode
_adjust_fdiv
??3@YAXPAX@Z
__p__commode

kernel32

GetLastError
InterlockedExchange
LoadLibraryA
RaiseException
FreeLibrary
LocalAlloc
GetProcAddress

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

??_7VgetLinkInfoCB@@6B@
?VexeVersion@@YIPADXZ

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE