21e14963e00b2e11dbd9f7a396b95a82_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21e14963e00b2e11dbd9f7a396b95a82_JaffaCakes118
Size

8KB
MD5

21e14963e00b2e11dbd9f7a396b95a82
SHA1

fa3752be54983a40506b0354c80bbe16220356f3
SHA256

430e9982fe5aafe77546205213ef2414b75ca301886ad47fcd49fa54ffc62b7f
SHA512

cbd764549c5b0a5f07d6a20876c803922d020cc03bd766622479d31ba0ebc96ec8686a103fb1318f848b1659c87aa784cf2558287cb4706b522f2f889315533d
SSDEEP

96:V3CbYolqCDDSmi36D28ZLxMO6QDYtcPtboynMyep:tCbhlJDDbZCO6WYSP1oynrep

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21e14963e00b2e11dbd9f7a396b95a82_JaffaCakes118

Files

21e14963e00b2e11dbd9f7a396b95a82_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7430ef4f9c12bfcf7cc349c032c1085

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
lstrcpyA
GetModuleHandleA
GetWindowsDirectoryA
DeleteFileA
WinExec
GetFileAttributesA
lstrcatA
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
GetStartupInfoA

user32

MessageBoxA

shell32

ShellExecuteA
ShellExecuteExA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
memset
strcat
strcpy
fclose
fread
fopen
fseek
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

urlmon

URLDownloadToFileA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ