f560bd10a1d8dce1a0c65d3c4ca728ea_JaffaCakes118 | Triage

Sharing

General

Target

f560bd10a1d8dce1a0c65d3c4ca728ea_JaffaCakes118
Size

351KB
MD5

f560bd10a1d8dce1a0c65d3c4ca728ea
SHA1

9521377f6df44705e0732759967d97c24d2936c5
SHA256

4e4eb36ffc85d36e3b6a5e820e20157e575bc4f2d9790b58ec4c614954cf9bea
SHA512

375cd11eb9a05d69d5791f9479cf556cf208ee64b1514c50602f65b79f023ea4bba1111110007b36115ddb5282c63375f4e5cd07e82ee239b1430aafe5df206e
SSDEEP

6144:tAFm5ovkVwJTBwKqRH18Ro29Rdm/ItQ6Xpgq/LsfO4qeT:6Fm5o8wJd9QonRg/IC6Xpf+p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f560bd10a1d8dce1a0c65d3c4ca728ea_JaffaCakes118

Files

f560bd10a1d8dce1a0c65d3c4ca728ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

349f9c69244bd997d17202dd9c238d24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHSetValueA

shell32

SHGetSpecialFolderPathA
ShellExecuteA
SHCreateDirectoryExA

msvcrt

fwrite
free
malloc
fclose
fopen
_c_exit
_exit
ldiv
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
srand
rand
sprintf
isdigit
isgraph
islower
isprint
ispunct
isspace
isupper
isxdigit
atoi
div
isalnum
isalpha
ceil
_XcptFilter

kernel32

lstrcatA
SleepEx
WritePrivateProfileStringA
OutputDebugStringA
CloseHandle
SetFileTime
GetStartupInfoA
WinExec
GetTickCount
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
DeleteFileA

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 326KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ