a139ecea790b95e5da0f720295305ec0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a139ecea790b95e5da0f720295305ec0_JaffaCakes118
Size

50KB
MD5

a139ecea790b95e5da0f720295305ec0
SHA1

46f39b24baf10590f8deedf8fd5309070441f68d
SHA256

289116e6b3fe148ae93faaadb0b75606a57873ba4ba11dd7c61ecdcb97925e3c
SHA512

3d473fbdeaaabb7d4d7c2403e48e0e5d57cd300185767aee073f8e61d9968d9b2a7db916dadb50649cd49248827b5bc0a7459e5abb869bc0f126dbc5ba3ecd6d
SSDEEP

384:Wv4Doyl+7y5QQ/5tGTp5+4JyFlryHzYpOY/XPYBlsbChuUs2hdFTFy1OwByqgdNM:24s18j0p5+lOrsGm2qMqWNU+KD4FV2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a139ecea790b95e5da0f720295305ec0_JaffaCakes118

Files

a139ecea790b95e5da0f720295305ec0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

574bafe3cd8746fec4f79f364d8d4e2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

AddAtomA
ExitProcess
FindAtomA
FindClose
FindFirstFileA
FindNextFileA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

_fstat
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fflush
fopen
fprintf
fputs
fread
free
malloc
memcmp
memcpy
memset
perror
printf
setbuf
signal
sprintf
strcpy
strlen
strstr

user32

wsprintfA

Sections

.text
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 132B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE