020eb17ce0b49857bf93e3b327b27926_JaffaCakes118 | Triage

Sharing

General

Target

020eb17ce0b49857bf93e3b327b27926_JaffaCakes118
Size

292KB
MD5

020eb17ce0b49857bf93e3b327b27926
SHA1

0f1cc14214bc24c9e756d323f8b476ee7c24907e
SHA256

ac2621f2351f146bb3e964104a5ad75e64e81a0721a32f18c5ff91c2f9f8ca72
SHA512

58a5504cf666b40d34aff22ddd2c2882adbf30dc5acef1df42f2506fa765d9bfcf8953febf25b7ed4cd6e1c218cbb9e9bb0ff81833c145d2a5f8df76ea866fc7
SSDEEP

6144:Dov6cXr+LIlGAg71i+NrKU/NbnOdnh8fKdDd7zEFsOSonUajKuo6K5xba:UBXr2kghi+Nr9/VO5ISd7rn9O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
020eb17ce0b49857bf93e3b327b27926_JaffaCakes118

Files

020eb17ce0b49857bf93e3b327b27926_JaffaCakes118
.exe windows:4 windows x86 arch:x86

86632da30434ccfc050190a47fb559c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
exit
memcpy
memset
_itow
??2@YAPAXI@Z
_wcsdup
??3@YAXPAX@Z
free
__p__commode

kernel32

GetModuleHandleA
GetTempPathW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
SetFilePointer
CloseHandle
GetTempFileNameW
FreeLibrary
DeleteFileW
WriteFile
ReadFile
LoadLibraryW
GetProcAddress
GetStartupInfoA

user32

MessageBoxW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ