001ed4edc0474bebe1a0705d5ee1d659_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

001ed4edc0474bebe1a0705d5ee1d659_JaffaCakes118
Size

16KB
MD5

001ed4edc0474bebe1a0705d5ee1d659
SHA1

cd5c335775360d42009f8a2f9422df94cd8aa8ea
SHA256

bae0510d53f0718031f3b3dbd3788c098eae603c22292adab493c6bc981e6ce2
SHA512

d31035b27e9adb88d31c3388993bf6352840ab2f3d16a7dd41d7269c395fe50b64bbc45702a711fa9d90943d290236c084e57158ff3f057f5902c56671b0cc4f
SSDEEP

192:qhEfzoSoZZowJZo3ydnMimmv+OPP1oynuGk:qiLwDH1dnhv+K1gGk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
001ed4edc0474bebe1a0705d5ee1d659_JaffaCakes118

Files

001ed4edc0474bebe1a0705d5ee1d659_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4964b009b2bf94e3eef9e88abc828fe1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoInitializeSecurity
CoUninitialize
CoCreateInstance

mfc42

ord537
ord4129
ord6663
ord1572
ord1601
ord857
ord800
ord4278

msvcrt

strcat
__p__commode
__getmainargs
_initterm
__setusermatherr
strlen
__CxxFrameHandler
__p__fmode
__set_app_type
_except_handler3
_controlfp
_mbsicmp
exit
_acmdln
_exit
_XcptFilter
_adjust_fdiv
_stricmp

kernel32

GetModuleHandleA
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
GetStartupInfoA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

VariantClear
SysAllocString
VariantInit

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE