d1cb7495505dca6f139bd398be7ca03a_JaffaCakes118 | Triage

Sharing

General

Target

d1cb7495505dca6f139bd398be7ca03a_JaffaCakes118
Size

16KB
MD5

d1cb7495505dca6f139bd398be7ca03a
SHA1

3e5f81b85a1d70565e49562a3fcb90ccd1c38bde
SHA256

78ef901d32c70e9ec01a41489c4931a2746fd1f7889144ffde794f37ed6a4b79
SHA512

1da6f38b21c5eaf051ea823cefd4fbb0240220565b01837362e6d307883797ae028bf6c203da32c792b9cb65e5d47eaa171630eb0645b518dd0c64f23269be58
SSDEEP

96:oit6zeCkdDOs5f70zPjGPtboynAoqq8ELG09m:/evGP1oynJ+0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1cb7495505dca6f139bd398be7ca03a_JaffaCakes118

Files

d1cb7495505dca6f139bd398be7ca03a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5fbd1d3ee092556114769423269110b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrcpyA
lstrlenA
GetStartupInfoA
GetModuleHandleA

advapi32

RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA

msvcrt

fopen
__setusermatherr
__CxxFrameHandler
_EH_prolog
fclose
fprintf
__p__fmode
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_adjust_fdiv
__p__commode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE