330960c1f80b677909224705496a4f45_JaffaCakes118 | Triage

Sharing

General

Target

330960c1f80b677909224705496a4f45_JaffaCakes118
Size

398KB
MD5

330960c1f80b677909224705496a4f45
SHA1

49f430d851cf8d498544743458eb77c5475a4f0d
SHA256

31768bf721a2b5ec5292b793a610b8461e954326d3a9671d8118aad83e1e233c
SHA512

8e00f93c367a453ba4a35fe23ad9497311c91887bebcc7863ec34d39223591a6e613d1e857323207ae9afd7459fc102b09076bafa5ca40f14c9758b229547d54
SSDEEP

6144:ossLUguFTPiPbQvwd64Mi3mZSwweCU+gKOCx6EhaZEtYLLbewAekW3C:o1LRuFu2UMSmZker+gKJx0ZKY6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
330960c1f80b677909224705496a4f45_JaffaCakes118

Files

330960c1f80b677909224705496a4f45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9cc6da73e7848c6f9d54b0a35ddd225

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHSetValueA

shell32

ShellExecuteA
SHGetSpecialFolderPathA

msvcrt

exit
_acmdln
__getmainargs
_initterm
_cexit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_c_exit
fopen
fclose
malloc
free
fwrite
srand
rand
sprintf
atoi
div
isalnum
isalpha
ceil
__setusermatherr

kernel32

lstrcatA
SleepEx
WritePrivateProfileStringA
OutputDebugStringA
GetStartupInfoA
WinExec
GetTickCount
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
CloseHandle
DeleteFileA

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ