cee69f4df85490da6747a2262876f652_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cee69f4df85490da6747a2262876f652_JaffaCakes118
Size

36KB
MD5

cee69f4df85490da6747a2262876f652
SHA1

e905148464fbaf92edc9d72a477dc2a280764167
SHA256

9f68c01172bc029a52d66bcf982cdc5be7c5fb513544fe385a1f57194fe4670b
SHA512

894450cadf81b0acefe5a7358f68eb0e43a77681ce720f0f60b10c5210e5186a8c88e22fe428e0041760b273ac0bca2f057e5bbf0da4000004c12dcb65f3567b
SSDEEP

768:XnQROBxfQtpVtuxU8CDiE+NpMeKSUDxl:X94m5U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cee69f4df85490da6747a2262876f652_JaffaCakes118

Files

cee69f4df85490da6747a2262876f652_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9b8b1f999ac78d5a9e6711b48dd4d55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
longjmp
_exit
_XcptFilter
sprintf

kernel32

GetProcAddress
GetStartupInfoA
FreeLibrary
GetSystemTime
GetModuleFileNameA
GetModuleHandleA
GetEnvironmentVariableA
InterlockedExchange
Sleep
LoadLibraryA
GetCommandLineA
GetLastError

user32

CharUpperA
MessageBoxA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

_mFdllinfo

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE