406efee8b940e35cc602e65ae6ce41e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

406efee8b940e35cc602e65ae6ce41e4_JaffaCakes118
Size

19KB
MD5

406efee8b940e35cc602e65ae6ce41e4
SHA1

51047fa320baca9cf359b9127b1cc3cd1fdeb720
SHA256

f0b6ca2221eb98af60477857a4ddd07187338505bcdefa98b16bff066120102e
SHA512

5255a63c80f2d0ae7dfb42adb24c306f6762aed9bb5be6d0d0e32bae02a360acb46ff3208896e5208e35d2b6a4171917856d784c79091770054b42ae980ebc3d
SSDEEP

384:rP5+x+1QnX+fztUmTd4dqhKxSzke2PWGmbaIcYd+o5:HQnuxPbdz9GmbaIbdh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
406efee8b940e35cc602e65ae6ce41e4_JaffaCakes118

Files

406efee8b940e35cc602e65ae6ce41e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8c59c891f11350b19acce6d47176d29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
__setusermatherr
_adjust_fdiv
_acmdln
_initterm
free
_except_handler3
_controlfp
_exit
exit
_XcptFilter
calloc
_onexit
__dllonexit
??2@YAPAXI@Z
memcpy
_itoa
??3@YAXPAX@Z
_strdup
__CxxFrameHandler
__p__commode
__p__fmode
__set_app_type

kernel32

GetStartupInfoA
WriteFile
GetModuleHandleA
GetModuleFileNameA
GetTempPathA
SetFilePointer
ReadFile
CreateFileA
GetTempFileNameA
FreeLibrary
CloseHandle
LoadLibraryA
GetProcAddress
DeleteFileA

user32

MessageBoxA

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ