6619fbab2a038b79c54a7fc32b1760b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6619fbab2a038b79c54a7fc32b1760b5_JaffaCakes118
Size

24KB
MD5

6619fbab2a038b79c54a7fc32b1760b5
SHA1

4facdbbe9ff7d250a8b4de5ae7a0425996a0cf86
SHA256

a84dc33afc56124a52d2b8f77d02e68068ea62bb4d9db6d99a74e8d22f23e4eb
SHA512

a944891f80aa6707519f1a69639435fe611678ba1816fa9aca40692d2ea0a226cffd8cbbae16ef2640b49ca72c30cad696e55c313b06915a57230a19fd3663c8
SSDEEP

192:fMuz6P1oynHi0IUTfwrwJgAUJD2aZ1ZcWO8ppW:VzE1Zi0IUUiPU922ZcWO8ppW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6619fbab2a038b79c54a7fc32b1760b5_JaffaCakes118

Files

6619fbab2a038b79c54a7fc32b1760b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0a85d061cb9d03f5fdac0645584f3c6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcat
rename
strstr
strcpy
strchr
strrchr
memset
_except_handler3
sprintf

kernel32

GetModuleHandleA
CreateFileA
CloseHandle
GetFileTime
SetFileTime
GetFileAttributesA
LoadLibraryA
GetProcAddress
SetFileAttributesA
DeleteFileA
SetCurrentDirectoryA
CreateProcessA
GetWindowsDirectoryA
Sleep
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ