f5393a2616fdacd43d46b302cc723e84_JaffaCakes118 | Triage

Sharing

General

Target

f5393a2616fdacd43d46b302cc723e84_JaffaCakes118
Size

15KB
MD5

f5393a2616fdacd43d46b302cc723e84
SHA1

cde268a8761226c886f9b04f1f9cce84ec136d36
SHA256

cb603da8a9cb1c8bbf922175d30e8f51db867fa5da3a4ddc3637805b7a6ccae2
SHA512

89ad00f64d9fcd0601c5bcbdbe5fcc2ed029f5b34dce3066326ce05c39dd2526c61c15e43575b248345f5be44990eca29f519b6956b2ed452b60576c55bb1077
SSDEEP

192:v4gVFB27OZINpR4Ybv3PCPxOgn6HhEQU507iGGOwEaPA5p:vX87OZOzu8gIP20JH5p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5393a2616fdacd43d46b302cc723e84_JaffaCakes118

Files

f5393a2616fdacd43d46b302cc723e84_JaffaCakes118
.exe windows:1 windows x86 arch:x86

607f95738b3bfd95748ba73603e0eb8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
GetLastError
LocalFree
RtlUnwind

advapi32

RegConnectRegistryA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

crtdll

_iob
__GetMainArgs
exit
fopen
fprintf
memcpy
raise
signal
vfprintf

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 368B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 688B - Virtual size: 688B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE