104d3372ad443c8c327e5cd1bb73a2c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

104d3372ad443c8c327e5cd1bb73a2c0_JaffaCakes118
Size

17KB
MD5

104d3372ad443c8c327e5cd1bb73a2c0
SHA1

a8c0074e03d666c9caacaf7b3171d9081d5560b2
SHA256

76e1083ce5290605a91ece6a7593babd08c67b75b099082c8f8d1ad127ec535e
SHA512

b0fe7555ba06c49d41889b72431c319c75e2351a03bef087caaa6863189fb56b58eda7cecb846f6083c1df7f4dccb7548ff656283a71c20b1b4a4bb468a227fd
SSDEEP

192:6NVHROPPU3kZ3iqgwOLyHUv2QoynjyFpKcGcCDc:1nU3kZSqgwQKUeQTne7KcGrY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
104d3372ad443c8c327e5cd1bb73a2c0_JaffaCakes118

Files

104d3372ad443c8c327e5cd1bb73a2c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0178e9559703f497a84b07b1292faeb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

kernel32

AddAtomA
CopyFileA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
lstrlenA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
printf
signal

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE