3aabf900f3184f24ae987d5a4a6881c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3aabf900f3184f24ae987d5a4a6881c0_JaffaCakes118
Size

88KB
MD5

3aabf900f3184f24ae987d5a4a6881c0
SHA1

c6918edd58da3b3ca6842e5920f78b8217fdb4bb
SHA256

f37abbe4ecb7c922f4d9f017672cd178663254a60caa0401210f25942c30e74b
SHA512

09a30291a530abefcb0e5533da0b3ec56fbf1c6c93878f55873bad153530d52a07db01a0ca9f6cec2280c515a07c5c13a9d1254efebf51701d9737ab65f52c8c
SSDEEP

1536:YUyHGU/PJFyISxttOojnBs9oNhplxkmEMm7Un40dHHuv3ZlfayxEE1C:1yHL/PXSFlG9shpUN4n4OHklHc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aabf900f3184f24ae987d5a4a6881c0_JaffaCakes118

Files

3aabf900f3184f24ae987d5a4a6881c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97bc4c03b63d15e309e79c1fc0fa3db8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

send

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_exit
rand
strtok
atoi
free
sprintf
malloc
fopen
fclose
_adjust_fdiv
_controlfp

kernel32

GetModuleFileNameA
GetCommandLineA
CreateFileA
WriteFile
CloseHandle
OutputDebugStringA
Sleep
GetProcAddress
GetModuleHandleA
GetStartupInfoA
DeleteFileA

user32

MessageBoxA

shell32

SHGetSpecialFolderPathA
SHGetFileInfoA

ole32

CoCreateInstance
CoInitialize

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ