3c7073a1807b102197f025609812c3e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c7073a1807b102197f025609812c3e2_JaffaCakes118
Size

146KB
MD5

3c7073a1807b102197f025609812c3e2
SHA1

5a2e81a44aae9de345e88606bf5e8e0b4f1d9f8b
SHA256

ddafeb2f3061ab6df496e9649921dc92555e9299f03b06d7657368fb31b72ddf
SHA512

ddafa23b60eb45a1f93ff7adba34ea4a3d5f71af16b71fb4a668fd0d2d163339337a01d22f7e0d60b37be1762a9b54f13a9ec8703041f29d3b9a173e520f1bbd
SSDEEP

3072:9G/oSRlZqrDPoevV+gxVsW3LTs7ToAvLJQ7yWWuHd0NXi/9+6NJPh:9G/hlZUDPDvogjs4LI7dzJ6yWWaF/7jP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c7073a1807b102197f025609812c3e2_JaffaCakes118

Files

3c7073a1807b102197f025609812c3e2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

510bef05a3d35760ca9e46bad5e42c8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MulDiv
GetProcAddress
GetStartupInfoA
GetCurrentThreadId
SetUnhandledExceptionFilter
GetModuleHandleA
GetCurrentProcessId
GetLastError
VirtualAlloc
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess

advapi32

AddAce
RegCreateKeyA
RegSetValueExA
RegSetValueExW
RegOpenKeyExA
RegDeleteKeyW
WmiExecuteMethodW
RegQueryValueExA
WmiExecuteMethodA
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExA
RegCloseKey
RegCreateKeyExW

Sections

.textbss
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ