dd348ed9aafc3a4a8d8495804226017e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd348ed9aafc3a4a8d8495804226017e_JaffaCakes118
Size

28KB
MD5

dd348ed9aafc3a4a8d8495804226017e
SHA1

1d9d1bae255aa4f7bfe3757516fa9a19f56b0ccf
SHA256

dea83162ba2edfec48692c2af786c5384befb4468c9641ea0b3bfff6a0f08ccb
SHA512

b78743c8bc129944d373b86e6538ca63f9fbabd116c1874b2904d35e6252d3a4be81b20a08c04b7f3d5e5b222af255c475a8f568ecb867a9469f4ca7ccc4ad64
SSDEEP

384:rnWEEEi2yVN9T+Umlhh31oyyPL8Perh6oZ4J:SHEaN9TIoyuL8PQh6oE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd348ed9aafc3a4a8d8495804226017e_JaffaCakes118

Files

dd348ed9aafc3a4a8d8495804226017e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6be5a4937ab654cc92f9dd44c4248fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegSetValueA

kernel32

GetStringTypeW
GetStdHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ