328e29f47dfee03a052e63da606ed4e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

328e29f47dfee03a052e63da606ed4e8_JaffaCakes118
Size

192KB
MD5

328e29f47dfee03a052e63da606ed4e8
SHA1

b55691be9b4f334f476e288db29ab3dc5d7e5c94
SHA256

c18ec865cdd12d6359c5da8e5aa8653e1308b294649b9cb1532749cef048de35
SHA512

a8acf7cd2bb96f4ad6999cae62ea4d7eba3f4546d9d660db1c18fea93ad0c83492f30efc912888e4c508d6e38c3ffde95e35895b44132d7b04419cf657fc11e8
SSDEEP

3072:Fs+vwTlbx2hSPai921QInj3DpUZuaHCcv7K6cXRitTBf4K:W4wTlY0PDzA3DpdyXv71cXRitTBgK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
328e29f47dfee03a052e63da606ed4e8_JaffaCakes118

Files

328e29f47dfee03a052e63da606ed4e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2835de975da4530025e7193ace6d056

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameA
DeleteFileW
SetFilePointer
Sleep
WriteFileEx
SetEndOfFile
OpenEventW
SetCurrentDirectoryA
GetCurrentDirectoryA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

SetWindowLongA
SetWindowTextA

msvcrt

exit
??2@YAPAXI@Z
toupper
??3@YAXPAX@Z
__CxxFrameHandler
memset
memcpy
_ftol
_controlfp
_purecall
malloc
free
_exit
_XcptFilter
_CxxThrowException
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ