0817bd0efc880d5c719c0296a68a8365_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0817bd0efc880d5c719c0296a68a8365_JaffaCakes118
Size

148KB
MD5

0817bd0efc880d5c719c0296a68a8365
SHA1

ddb97daafc9b59a6939126cc1390982edc7559e2
SHA256

f9b1a001992ea5d7d27b240ced83f2922b861bb63509a685b8268d5213d841b9
SHA512

ae707ff6fe3bac0c5eef945a2decaa92affa24f5ec3ccc20160be98c82fdd54daf7383119fd2e4e969c77c93e33ec3da144b5f9a11f07bd960b985bbbb58f688
SSDEEP

3072:3nAPqjNMmnVoBqIMRQxVECSDtl5wwqgtBtSHGX:3nAP2Qq7C8tl5w8h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0817bd0efc880d5c719c0296a68a8365_JaffaCakes118

Files

0817bd0efc880d5c719c0296a68a8365_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fefcdd163b1c7a380e21eec951f07627

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__getmainargs
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
??2@YAPAXI@Z
time
srand
rand
_snprintf
__p__fmode

kernel32

GetStartupInfoA
CreateThread
WaitForSingleObject
OutputDebugStringA
GetModuleFileNameA
CreateFileA
WriteFile
CloseHandle
GetCurrentDirectoryA
SetCurrentDirectoryA
GetModuleHandleA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE