391710f5c1eeb654f0dc8f41f633451f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

391710f5c1eeb654f0dc8f41f633451f_JaffaCakes118
Size

97KB
MD5

391710f5c1eeb654f0dc8f41f633451f
SHA1

7926798131089a4f32995bc36a3dc9266b870c05
SHA256

de5a7032c8d16cb64bb711950c1813d8a58d71bfa321e52253ba8caac597edbf
SHA512

c859edb47939b84d30c782adea41c82b184cf1bbdc448b9ed357ee6abb0784648188ffc50c578254acb596e20fcdfb443f87b18f50c86af08ee7702a610d822e
SSDEEP

1536:mBrYuuju2TSy/c6ojNC6f4+m//l1iyaNCBUe29XvAYJaV6RP8cuBwRLAxYw:WbR+/c68I6RW91raxeUXoafm7aw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
391710f5c1eeb654f0dc8f41f633451f_JaffaCakes118

Files

391710f5c1eeb654f0dc8f41f633451f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9b624100aa9b192b7f524911004a3bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA

kernel32

CopyFileA
ExitProcess
SetUnhandledExceptionFilter
WinExec

msvcrt

__getmainargs
__p__environ
__set_app_type
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
atexit
fclose
fopen
fputc
signal
strlen

user32

MessageBoxA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE