dd5b38ec77a45b9311401675f7dff915_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd5b38ec77a45b9311401675f7dff915_JaffaCakes118
Size

28KB
MD5

dd5b38ec77a45b9311401675f7dff915
SHA1

737f0d3bf898aa50310659493640e1b35f3bd9f7
SHA256

2fb1c8a5a415d796d460539eb216b88e10c9fcf2e8fe72d902dbc96c0b30c8e3
SHA512

7ef0b81abc085253138480a6fca12909248f1d457a089f79cc78e1b2cdbaf35840b44e42bc02c00ed5dcf4935afa63c00eca4af72387fcc60c7df2f373013f0c
SSDEEP

192:GHuKmxhaJe1fszkLFltvyuC3nod3+Uu6qik3fOaIoQU1CGNoyn06WX21dKNLSk9Z:jKQhBmzkLxvZvitWnoQACm6Twga

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd5b38ec77a45b9311401675f7dff915_JaffaCakes118

Files

dd5b38ec77a45b9311401675f7dff915_JaffaCakes118
.exe windows:4 windows x86 arch:x86

794f720491cfb3bab7d3b7c35e78cd9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

fread
perror
malloc
fclose
sprintf
free
fopen
strspn
strcspn
fgets
fwrite
getenv
strncmp
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
printf
_iob
fprintf
exit
strchr
strrchr
_exit
_strdup
_stat

kernel32

QueryPerformanceFrequency
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
QueryPerformanceCounter

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE