b62c210dfcc85526179814913eab61c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b62c210dfcc85526179814913eab61c2_JaffaCakes118
Size

31KB
MD5

b62c210dfcc85526179814913eab61c2
SHA1

a01b1466d22ae51e7f1ffb8da9148158116fad31
SHA256

24d1b326c789829b9e45b8821342e76dbdf346bcc0e348c99e01329e2b6626a7
SHA512

1026e6d3d8fd7c47cce216348b0d00ee547ca00d1e225a0b4035d52508d59c55167e700b28439daf7ab6625bc782c6e9ae45e06c6bb744227584e3792c457439
SSDEEP

384:NCV+ndu+ua6wzL2wXmF61fw9con7wL6U1nsTTv:cMTR49cwc2QnsTTv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b62c210dfcc85526179814913eab61c2_JaffaCakes118

Files

b62c210dfcc85526179814913eab61c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8779bf65f9326767111c2f1390e8382f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
GetLastError
SetLastError
GetProcAddress
Sleep
ExitProcess
GetCommandLineA
CreateThread
FreeLibrary
GlobalFree
CloseHandle
GlobalAlloc
GetStartupInfoA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA

msvcrt

strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE