JaffaCakes118_68c34901a177fbb96af6857df0dcd4bc | Triage

Sharing

General

Target

JaffaCakes118_68c34901a177fbb96af6857df0dcd4bc
Size

108KB
MD5

68c34901a177fbb96af6857df0dcd4bc
SHA1

a523fd13dd184ff410121d5b978ae16e22cba795
SHA256

fe8a35896ea42520727ddb6e51dca901f7cbbd1faa0a7cf5c2b11754b0492375
SHA512

3bd2c680afa03dbe14a6da71901718589082d2221e6c93a2f1a17aa6344a7ebab1432def2397ec7b3c6c3f0881058e9696f53c1d39a82af75c048b64a06dd3b2
SSDEEP

3072:Fq0zuOBeexvwnwdWX0CBI8sAwfKSSUL6gyIx7/4:F3zuSp1GX0CC/ArSSBToL4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_68c34901a177fbb96af6857df0dcd4bc

Files

JaffaCakes118_68c34901a177fbb96af6857df0dcd4bc
.exe windows:4 windows x86 arch:x86

6452d81cfbb4c0415b365bdb66b2bfdf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_adjust_fdiv
__p__fmode
_controlfp
__p__commode
__getmainargs
__setusermatherr
_initterm
_exit
__p___initenv
_XcptFilter
printf
malloc
free
_except_handler3
exit

kernel32

GetUserDefaultLangID
FormatMessageA
GetFullPathNameA

advapi32

RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE