f6553d67a19879d218ef742295c878c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6553d67a19879d218ef742295c878c3_JaffaCakes118
Size

5KB
MD5

f6553d67a19879d218ef742295c878c3
SHA1

3ddac60e8e9e4aff81b707044b01b5bfcea1dff7
SHA256

edaa4450f2463e95326b17255a26afb148248641b191be9cba5c97d2535e3d2b
SHA512

d5317d2a6069991dd8b8609793c58918fdab462848ff86fca7c67326ba5fe2a6884f4ee77d3c9d64993c5e0286131c8d57e33039665d09a2c49bd4b28b715f0a
SSDEEP

96:xGY17YLH7DIs7FIdOPtboynMguZnToMGaCdGIpWnG2CBkuuyJcVFW815ST:xGYxYz70sO8P1oyneTJN7IpWnwR8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6553d67a19879d218ef742295c878c3_JaffaCakes118

Files

f6553d67a19879d218ef742295c878c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ccc368890f1ca526a8a5fcb3a842cfc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetFileSize
CreateFileA
lstrcatA
lstrcpyA
lstrcpynA
CreateDirectoryA
WriteFile
DeleteFileA
CreateProcessA
RemoveDirectoryA
CloseHandle
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
lstrlenA
Sleep
CopyFileA
GetTempPathA
lstrcmpiA
GetTickCount
GetModuleFileNameA
GetModuleHandleA
FindClose
GetSystemDirectoryA
GetStartupInfoA

user32

FindWindowA
GetDesktopWindow
PostMessageA

gdi32

GetStockObject

shell32

ShellExecuteA

msvcrt

__getmainargs
_controlfp
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
__p___argv
__p___argc
strrchr
_exit
_XcptFilter
exit
_acmdln
_except_handler3
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE