eb1f46e96b7fcec4f578a082770facaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb1f46e96b7fcec4f578a082770facaa_JaffaCakes118
Size

262KB
MD5

eb1f46e96b7fcec4f578a082770facaa
SHA1

cc63c8cb7af95c36a6e16dae2d46a01747e88fbe
SHA256

3da74d0a74e1ecf52c85606eb2db773990f504e5d18a0d6ad62ef0282b324d27
SHA512

e8bd0bc9699bfd6308c4015e37c56c33030ef006ec87b93af902605bd20c2916ccca9ba8e6c1af1b3b8a8770dc4f68aa99db938cae5cd9c5a7e9858115637d28
SSDEEP

6144:w3KzkPr4yfkDAp18uJmp8DO9AHYPvRV/5HBQqjqRYe:w3Kmr4yfkDAb8r2Oyaj/vqRYe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb1f46e96b7fcec4f578a082770facaa_JaffaCakes118

Files

eb1f46e96b7fcec4f578a082770facaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97623dcaed07aba16abac171ef612467

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress

user32

BeginPaint

advapi32

RegCloseKey
RegCreateKeyExW

msvcrt

_adjust_fdiv
rand
srand
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 698B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ