a789ca6036def69557ed56d322ee5975_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a789ca6036def69557ed56d322ee5975_JaffaCakes118
Size

68KB
MD5

a789ca6036def69557ed56d322ee5975
SHA1

f66d7a370e58bd24bf720e7005b94cd2f09a7c32
SHA256

44253a2e710ee85c95d3c3afdc6d8684dbf5da33a4ed992b26854f0d732e7676
SHA512

1c463270355ea301780fab61b75b60ec1de7adb745adea5abd186ea92a40aec2e9bb9ee0060c42746c72820c169c15a9bc9cb116acd21ab615a8e52d341f812d
SSDEEP

1536:7znZyfcojwCg+3mBUYZ99cEyw1YKHkc0tz:3ZyzgkZKYvpz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a789ca6036def69557ed56d322ee5975_JaffaCakes118

Files

a789ca6036def69557ed56d322ee5975_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18e85a11d6a999c2cfcbd4c554b03e82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
GetModuleHandleA
SetFileAttributesA
GetLastError
LoadLibraryA
ReadFile
GetProcAddress
GetStartupInfoA

advapi32

RegCreateKeyExA
RegEnumValueA

msvcrt

_controlfp
_except_handler3
??3@YAXPAX@Z
sprintf
__CxxFrameHandler
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 978B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ