3c26e23d1d977dedde7ea43e9caffd0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c26e23d1d977dedde7ea43e9caffd0b_JaffaCakes118
Size

6KB
MD5

3c26e23d1d977dedde7ea43e9caffd0b
SHA1

9439c7505b074266c98bd01dfee24063180b2139
SHA256

edb4b18da3cdec08fc1914e0adad006b07d8d09f7a747e87eab1c35a251b9d61
SHA512

62feb37bcf99b9469ff4a69ea4fce612496c21860a83055196c91530d4fcac188b3d15731214f18f22b9a8718371ffff07032029541e2744a46c5352bf79c1de
SSDEEP

96:m6J4YH6lIQa9x0NAwx3CDh+6KyBXnrFG8STB3:mW4YayeNAO3CzK0nA8STd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c26e23d1d977dedde7ea43e9caffd0b_JaffaCakes118

Files

3c26e23d1d977dedde7ea43e9caffd0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03295ef26a296874907f518f52170169

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

kernel32

AddAtomA
CopyFileA
ExitProcess
FindAtomA
GetAtomNameA
GetSystemDirectoryA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
signal
sprintf
system

shell32

ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 184B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE