a339ea5d8bc6900e30b954ba2dfcb7f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a339ea5d8bc6900e30b954ba2dfcb7f4_JaffaCakes118
Size

290KB
MD5

a339ea5d8bc6900e30b954ba2dfcb7f4
SHA1

b5f3ac29da4c07f836e0961b5a9956c41f943607
SHA256

f18177d7d961b41d40225b26b6733d65f8d73c4ee2d6a21d2981e4844c2edc63
SHA512

3bf05685ec54d6affa8ff0db385251b25533d9833164a08f4a076d50f08bd5e2203ab2c209230ce3a3592a6f20296b96866348ca2e77b33e727a4be41b730d39
SSDEEP

6144:oilTLmiOX14eF8ae0yhoakvi9Kok3PseGo+D66jyzyPaJR2wU1:bXOXieW0yhEvi8/sekFOR2b1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a339ea5d8bc6900e30b954ba2dfcb7f4_JaffaCakes118

Files

a339ea5d8bc6900e30b954ba2dfcb7f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e069023334a3729daa4ab1400b9586ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetCurrentThread
GetModuleFileNameA
OpenProcess
CreateFileA
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
CloseHandle
lstrlenA
DeviceIoControl
GetCurrentProcessId

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shlwapi

StrStrIA

psapi

GetModuleBaseNameA
EnumProcessModules

msvcrt

_controlfp
__set_app_type
__p__fmode
_rmtmp
fclose
fprintf
tmpfile
memset
exit
malloc
_except_handler3
rand
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ