d03285662f53f3504b73dd4acbf586a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d03285662f53f3504b73dd4acbf586a3_JaffaCakes118
Size

12KB
MD5

d03285662f53f3504b73dd4acbf586a3
SHA1

5d69fd22cbc2aca23a06ff75030ed7ed8aec9b54
SHA256

428fd996158825d507f3344a7e8427f4f5f66042f2bf6dc7a537e1fa8759944e
SHA512

edb570bd738eb8974269c5c98c31878267e3acd33c9d0e2a3cb8ad57d62216a196c3ff8e71925d2b264c1f49d00e18f29feaa2c2647f931824f237ca7b2b736a
SSDEEP

192:MXe9eobcvNBqUHov8aMkvOi7GP/VklJnmIo/PVO:MXe9eobcVJHov8aLvOi7GP/VklRmh/A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d03285662f53f3504b73dd4acbf586a3_JaffaCakes118

Files

d03285662f53f3504b73dd4acbf586a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fdda4e756fdf5f13f59e26062417fdbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegSetValueExA

kernel32

ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
AllocConsole
CopyFileA
SetUnhandledExceptionFilter
Sleep

msvcrt

_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
atexit
fclose
fopen
fprintf
__p__environ
rename
signal
strcat
system
__set_app_type

user32

FindWindowA
MessageBoxA
SendMessageA
ShowWindow

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE