350cf9fa94077b7917dd2dd2e39a29d5_JaffaCakes118 | Triage

Sharing

General

Target

350cf9fa94077b7917dd2dd2e39a29d5_JaffaCakes118
Size

62KB
MD5

350cf9fa94077b7917dd2dd2e39a29d5
SHA1

77e5e7fc6e0292738a7bba52662d36b0560b2148
SHA256

0c0d6e5d54eae505488fbec593a66d825f8f01a46f198671c8e03acd0c64b9f3
SHA512

1b80a2b65bfab871e3345cceaf8caef13b68d288c95f3d79be18da9d3a9df7fbd81d488998a6ed9b7d3555b14d8ce13ffac244f3e9f355c515754182fc7ba403
SSDEEP

1536:fBpS35aWQ+omkLlbnGCoHE/orIpMuia14CTT9Op0peS:fBpS35aWPZkGk/orIfL+a9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
350cf9fa94077b7917dd2dd2e39a29d5_JaffaCakes118

Files

350cf9fa94077b7917dd2dd2e39a29d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db060c5b7e64a75b347bb45d14450ab1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceA
GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetShortPathNameA
GetModuleFileNameA
ReleaseMutex
WaitForMultipleObjects
CreateMutexA
DeleteFileA
GetModuleHandleA
GetStartupInfoA

shell32

ShellExecuteA

msvcrt

free
strcat
strcpy
calloc
strlen
fclose
fopen
malloc
strcmp
memcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fwrite

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ