c10fbd4151f81c87d3f09686af105d69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c10fbd4151f81c87d3f09686af105d69_JaffaCakes118
Size

81KB
MD5

c10fbd4151f81c87d3f09686af105d69
SHA1

6cfb17d0cb2479d62452de8f0dc53bddfb481ab5
SHA256

d04985f95615afab8e1e659c5d0321c7b66e3dd45e69a19705827d65d51f7226
SHA512

ee3b7c9fee0eb9cbe25989598deb7ddff2fed4d40bf2fbb2037b48dfb597108a36607b47227545080678d37bccea6ef8344210cf6ab7bc4ecc1bc858cbf59d1c
SSDEEP

1536:5wiAwwAwjcIboLYpFxKkoWUR1mTTp2qUCHozutFNlkBAgXMCDYzpVcOdYYZ9:5wiABAwxokxVhT06ozuPNC3cCDYzrcaT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c10fbd4151f81c87d3f09686af105d69_JaffaCakes118

Files

c10fbd4151f81c87d3f09686af105d69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cad34151d9588ae924ef14e2a3620233

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetModuleFileNameA
GetStartupInfoA

user32

wsprintfA

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA

msvcrt

_splitpath
_exit
_XcptFilter
exit
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE