4bb6988207b7e64c91181ab3a7a82e3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bb6988207b7e64c91181ab3a7a82e3e_JaffaCakes118
Size

99KB
MD5

4bb6988207b7e64c91181ab3a7a82e3e
SHA1

1dac91f665dc95aaca168004620b79f00d2682f9
SHA256

d02323c52b3142ffbfc2a8d92a4202022d2671ba18b4efbe7569863817e550e6
SHA512

2786b11aa9b1dc2b9b58e4ca49279bc22d4740cc5530cfa988f6cc4fc9048aaef6b079422927a060a5d30f73b7bb2f1432168cfb7e57d5b2f8941312645b13c2
SSDEEP

3072:FKCccL9pMnl5Ly+qCbnwIB0hvQ//WMERNdQaMY3Dw:FKCRL9pMnl5Ly+qOwIo8+3NpDw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bb6988207b7e64c91181ab3a7a82e3e_JaffaCakes118

Files

4bb6988207b7e64c91181ab3a7a82e3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c892ef074d3d626b1309c879f4c0e774

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetShortPathNameA
MoveFileExA
GetModuleFileNameA
DeleteFileA
GetModuleHandleA
GetStartupInfoA

msvcrt

calloc
strlen
fclose
fwrite
fopen
malloc
strcmp
strcat
strcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
free
memcpy

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ