JaffaCakes118_3da2cf420147e2a68f5ac0458ed65f8e | Triage

Sharing

General

Target

JaffaCakes118_3da2cf420147e2a68f5ac0458ed65f8e
Size

373KB
MD5

3da2cf420147e2a68f5ac0458ed65f8e
SHA1

8f20c31c4572a8927983b94ba334e2db9216a0c1
SHA256

12d543f6a5c8d36a324ef1c7892b45f5a3971c6543805b3d0cfab7886f4a7320
SHA512

7b9e5dd37b0c6280674b7f48cee8d51fd416947c614480daeff585f2b65ffcabc6461acb437b97c6e5657242fe9cd27972db91a000f3bdf9d769e05e498736b5
SSDEEP

6144:zSY9h4EyALXWoPYL3AjqP3ZJZZnNcwawE+3V1accsgF7M1EoI01kxbwK0SNjk5Dp:zSoS5ASoAMeZxnNvKiV4cJS72EXOSZkn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3da2cf420147e2a68f5ac0458ed65f8e

Files

JaffaCakes118_3da2cf420147e2a68f5ac0458ed65f8e
.exe windows:4 windows x86 arch:x86

93d4ac8e462d6cd2366e1fd23cc5ee1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess

user32

wsprintfA

advapi32

RegDeleteKeyA

shlwapi

SHDeleteKeyA

msvcrt

_adjust_fdiv

Sections

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ASP0
Size: - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ASP1
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE