d5d3b97d3a980ab6cb16979ffe60a1e6_JaffaCakes118 | Triage

Sharing

General

Target

d5d3b97d3a980ab6cb16979ffe60a1e6_JaffaCakes118
Size

15KB
MD5

d5d3b97d3a980ab6cb16979ffe60a1e6
SHA1

6a21c3c3131fc38029f8a48f60d9006c41417baa
SHA256

069b6d6d98117016b675599be39cffa16453f5e636ad96bdf99389b52333030b
SHA512

4402e7736b3c97564c5387d9b0879e7f13c0edf6056d20298067e29bfac37193145a6f3a814d62b1635ea198b9b0c5e369931e981c3f64b2767a4cfb14694bb9
SSDEEP

384:4zI5zTPCJp4PBrN8dayhlM7rGWHFt6IW1e:7KJp4pqUZF0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5d3b97d3a980ab6cb16979ffe60a1e6_JaffaCakes118

Files

d5d3b97d3a980ab6cb16979ffe60a1e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

827ce7b0dec6b01c1b4ba5bcb0113f5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA

kernel32

AddAtomA
CloseHandle
ExitProcess
FindAtomA
FreeLibrary
GetAtomNameA
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GlobalAlloc
GlobalFree
LoadLibraryA
SetLastError
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
fflush
fprintf
free
malloc
memset
signal
strcat
strcpy
strlen

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 304B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE