152f28d100d06d9fef1f82f484c69288_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

152f28d100d06d9fef1f82f484c69288_JaffaCakes118
Size

6KB
MD5

152f28d100d06d9fef1f82f484c69288
SHA1

616db0984ab7f8420eb517f55e39134ec42cf7f3
SHA256

ad21943bc08b89adcf2efab5333a07ae33ba8b99ed99012a3efbcc9e57b43c3b
SHA512

e75a37a817e473352e94e9e9a1e2f8f0b91ee169c75ba71537383b055581094309f1a4ee44231b09d8e065ef42d9fd1d2b1c9e24189484af86e138c2534ac344
SSDEEP

96:rptZV78vT2gEqZgbVVhhdu2fZKLP6Oae1pIaOiE2eGCWISiZIGIPtboynWN:rp3VQvT2gpgbVVhhdu2fZKzgqIaOvQnz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
152f28d100d06d9fef1f82f484c69288_JaffaCakes118

Files

152f28d100d06d9fef1f82f484c69288_JaffaCakes118
.exe windows:4 windows x86 arch:x86

52e089d67ca56fcd23af88f6105ab235

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA

msvcrt

__p__fmode
__set_app_type
__p__commode
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
time
srand
rand
sprintf
memset
memcpy
_except_handler3

kernel32

GetStartupInfoA
GetSystemDefaultLCID
GetUserDefaultLCID
WritePrivateProfileStringA
FindResourceA
SizeofResource
LoadResource
FreeResource
IsBadReadPtr
VirtualAlloc
LoadLibraryA
GetProcAddress
VirtualFree
LocalAlloc
LocalFree
GetModuleHandleA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ