d4a8d766fd59f3c4baf006c6bcab1c35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4a8d766fd59f3c4baf006c6bcab1c35_JaffaCakes118
Size

49KB
MD5

d4a8d766fd59f3c4baf006c6bcab1c35
SHA1

b0eb37cbb9a2a940dab5c02410f1cc8690510585
SHA256

e785703f5c59b5bdc47a9989ed84e4bb28de60b9892a896bb09ffbd672dc04d3
SHA512

69ca08ac270e895f99af075bd30aecc6488312cb530cd8a943fe960521be5adc5f31681234a0363e65626c504e270a985c1d713512d5cd65cb6b53272fe5d386
SSDEEP

768:NyDqmPvkbCqNdScrOS01bPzcolxKzZKl9YNlcPAZHVEYl0vF8FFppUarprU0rCp:NhCKdNrOSyzcWK9EWNGPAdVERCPrUdp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4a8d766fd59f3c4baf006c6bcab1c35_JaffaCakes118

Files

d4a8d766fd59f3c4baf006c6bcab1c35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

20bd9ac47b1c0ccb420bedf05a6d90ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStartupInfoA

advapi32

RegOpenKeyExA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
calloc
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr

Sections

.rdata
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ