17077a91622054e94190688647f0e54e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17077a91622054e94190688647f0e54e_JaffaCakes118
Size

24KB
MD5

17077a91622054e94190688647f0e54e
SHA1

a59a5f81938d47df662a5bc59f806d1a9bb59177
SHA256

862316d8fd4d0adc79b74373383b00a2a1a8e0674a97cdd440ce3021ab5a9d78
SHA512

70176164883d9428450169c17e08ad4171099b18700b87ab62c2ab3158332c03934c7a204298b5e437009f10df2fc44bfcf73d5c3af11cf0b2873770caa308a6
SSDEEP

192:+vc90wgGLHPTVM4yKnRjaTqOTps/YiP1oynMpLOXFZXdTt:+vc90wLLLmKnpOvM1GpLOXFZt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17077a91622054e94190688647f0e54e_JaffaCakes118

Files

17077a91622054e94190688647f0e54e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46c62a190dcb985535e29ed13d123b31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetCommandLineA
GetTickCount
LoadLibraryA
GlobalAlloc
GetStartupInfoA

advapi32

RegQueryValueExA
RegCloseKey
GetUserNameA
RegOpenKeyA

msvcrt

strlen
printf
sprintf
strcmp
strstr
strcpy
memset
realloc
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
rand

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ