5e7a4ff9e65c0b878952256df0370479_JaffaCakes118 | Triage

Sharing

General

Target

5e7a4ff9e65c0b878952256df0370479_JaffaCakes118
Size

34KB
MD5

5e7a4ff9e65c0b878952256df0370479
SHA1

2f028e93510e477757832490aac2a621d9512dc8
SHA256

41d52039d662c357e3ea6cdd3ce4813af25f908b920dc4877c3122a76014758e
SHA512

979c0cae425ca8054b77757638d7efaf716acbda1518f541c3e8ac816e9c4d76fd3387ba200f1a172dcb8edb8aeb463b25114de14a4cf9e9cda483d40ad760fa
SSDEEP

768:yuCPRFiCMNpBeF1kUjUInIl7TIAE+8TVL9ioN9OjnMcm+6fe6bZ:DgApkrkUIVE+GL9GM5ck

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e7a4ff9e65c0b878952256df0370479_JaffaCakes118

Files

5e7a4ff9e65c0b878952256df0370479_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ed8ebb570a573c7a6dd98b76cc39e58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
WinExec
DeleteFileA
CopyFileA
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
GetModuleFileNameA

msvcrt

time
_mbsupr
sprintf
_ltoa
strlen
_mbsrchr
_except_handler3
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 250B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ