f2e201992c5903550e2920d7aa5fa6f3_JaffaCakes118 | Triage

Sharing

General

Target

f2e201992c5903550e2920d7aa5fa6f3_JaffaCakes118
Size

20KB
MD5

f2e201992c5903550e2920d7aa5fa6f3
SHA1

74bd9ea23ae9495c0d4ea0bcb1ddc76566b3fe57
SHA256

eb073365d64cf861acc9cd31a4deb1d2135a3a0a9809b39a390b1e48da093587
SHA512

410c99c3ba029708ecf864a47b6e41b099771e1b449be7d903f143104739b5dfacf9043623988a44afb6685085e4b33efcae701e98233fd57be91cac8480cb3f
SSDEEP

384:a6FheTgjREFhbH6nOg2X+6cz1fBqkCoc2C4FJWEt6xj9/ggGutmdhB:jPqgjREanOtG5MJ32C4FoEMxUuAjB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2e201992c5903550e2920d7aa5fa6f3_JaffaCakes118

Files

f2e201992c5903550e2920d7aa5fa6f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d5ffb3e78032b29e96bfa99d8ef0b2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
GetVolumeInformationA
GetTempFileNameA
Sleep
GetModuleFileNameA
GetTempPathA
CreateProcessA
GetTickCount
ExitProcess
CreateThread
GetLastError
CreateFileMappingA
GetModuleHandleA
GetStartupInfoA

msvcrt

fclose
ftell
fseek
fopen
toupper
fread
strcpy
calloc
_except_handler3
malloc
atoi
fputs
strlen
strcat
rand
strstr
strrchr
strcmp
memset
strtok
srand
__argv
__argc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
fwrite
_strdup
_strcmpi
_unlink

Sections

.bss
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE