5a3ce567510e987ddfbb9ebbcb7d7667_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a3ce567510e987ddfbb9ebbcb7d7667_JaffaCakes118
Size

64KB
MD5

5a3ce567510e987ddfbb9ebbcb7d7667
SHA1

31ada1539349a3597207d6a5f9431af40ff2def6
SHA256

4423bb93879d05a2f01722f09cfd1aff85199f90c34d5444911efc955dfb1d5e
SHA512

7b87d48b186ea4b5f3220592c1da27d21ec1400f40764a51ad1833bf044f47ec7d861c0dbd7db150ca2e6480394c64f7f85fb888aecd72d79fcda45341dfded4
SSDEEP

768:mzCI7gG7t5aNG+8zMZ0lljiYUuifxG9zX9JljGIL11+rSOGuSuoKDG8+Cp:GCNUtk8gGl1RUugUDJFNL1MrSf5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a3ce567510e987ddfbb9ebbcb7d7667_JaffaCakes118

Files

5a3ce567510e987ddfbb9ebbcb7d7667_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93f63c94c85a8d5b942852158b8f0fce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
DeleteFileA
CloseHandle
WriteFile
lstrcatA
GetCurrentDirectoryA
ReadFile
SetFilePointer
CreateFileA
Sleep
FindFirstFileA
GetModuleFileNameA
SetFileAttributesA
GetWindowsDirectoryA
CreateThread
lstrcpyA

msvcrt

strlen
memcpy
memcmp
malloc
rename
sprintf
strchr
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ