adbc0dc3af53d5371f82def07e2d9da8_JaffaCakes118 | Triage

Sharing

General

Target

adbc0dc3af53d5371f82def07e2d9da8_JaffaCakes118
Size

5KB
MD5

adbc0dc3af53d5371f82def07e2d9da8
SHA1

b51e4ac7293bf0a7cd98c429df5f16857b1f9b76
SHA256

ccca0f57b24e86115cccc2f1d6cd6ad246059a9336dbb8f0f5e0df4592150449
SHA512

d702a4f3039b0bb22a7ff27fbf4e7b42219954a716df2fefc594d27408fb7f8452b851931677985e3e810fb877f65801eb96d1390c8618f3eb4f9a99759cac30
SSDEEP

96:BosymPBF1mSjNU8cSu05iuvSjM3nPm/b33YHH3EMTZLeO/IclxhW2s:BosbPBF1m4pu05iNjI+3o3E0dT/Iclxw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/gskeyinuseuni.exe

Files

adbc0dc3af53d5371f82def07e2d9da8_JaffaCakes118
.zip
gskeyinuseuni.c
gskeyinuseuni.exe
.exe windows:4 windows x86 arch:x86

a1e853a5de5297a9a24f98e3f8526b46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

_fstat
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
exit
fclose
fopen
fputc
fread
free
fseek
fwrite
malloc
perror
printf
puts
setbuf
signal
sprintf
strlen
tolower

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 160B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gskeyinuseuni.txt