c087ef63c35c2aba863e3fa9b7aa4388_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c087ef63c35c2aba863e3fa9b7aa4388_JaffaCakes118
Size

6KB
MD5

c087ef63c35c2aba863e3fa9b7aa4388
SHA1

b0d796c3f729c92941cc08a798bc5518725a7414
SHA256

0b5512a02e4bafd67aacdf102e7f2610d7015437fe3a3afb01f7ef9a7fddf9ce
SHA512

c4048e3815342fc60fd00dd3bbd48bb299dbf90030fc2ead782f184473f634dfb257099d7fda6224bf9c4f21efbb8600aae7d2b020853fa3ee191c1e53ea80a4
SSDEEP

96:yJqHxnqBkKbIEXF+QBEE28qKeuwrdd3yMN:gqHx5Kb32Pdd3y0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c087ef63c35c2aba863e3fa9b7aa4388_JaffaCakes118

Files

c087ef63c35c2aba863e3fa9b7aa4388_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab69d0f007ed02de7afd504cf2e718eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal

shell32

ShellExecuteA

user32

MessageBoxA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE