3dad688fc9fa7ceb5326c3e20c486238_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dad688fc9fa7ceb5326c3e20c486238_JaffaCakes118
Size

56KB
MD5

3dad688fc9fa7ceb5326c3e20c486238
SHA1

1cca1af41b87935b824d09f1a382ec28c42387a5
SHA256

e4ab649e047c170be4bf2da42527e4479370bae2ffc6b5d19b5170ba335a8605
SHA512

27d1c349e11aa2d9e771b3941d97198ff854b5ca5ac35df9f974b668caa2e8b2f9564e7dffc82815f21e086c616934d468232228dc9e64842d66eebf54b41371
SSDEEP

768:c4mDMcD6XjDb/tDLnDapzCIDC8I9RkPATPmnUXYVpxjTDtVm:NmDLDCDb/tDLnDaNCIDEoITPCXm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dad688fc9fa7ceb5326c3e20c486238_JaffaCakes118

Files

3dad688fc9fa7ceb5326c3e20c486238_JaffaCakes118
.exe windows:1 windows x86 arch:x86

50423c23c2048f86a40c015168a1f620

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
RtlUnwind
WinExec

user32

RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
CreateWindowExA
DefWindowProcA

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

crtdll

__GetMainArgs
exit
raise
signal
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 380B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 896B - Virtual size: 896B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE