667ab18992422c1ba02d26bcd9ecab8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

667ab18992422c1ba02d26bcd9ecab8a_JaffaCakes118
Size

24KB
MD5

667ab18992422c1ba02d26bcd9ecab8a
SHA1

8637694382ba8eb22fc3cf551861dbe6507fb54f
SHA256

f2a86524deae94b8e867fc411817797fd3cfc396279338cd46d18ab4e5299fd0
SHA512

f273742064a6cff5ebda25e5f9de708c7dcfedeb970fb2ba2df43757cc68ae06cd513861d0f64c90cbe77a1a34f4406058bd9d7bc0c1ef6dc8d25ba89d71079b
SSDEEP

192:dJ4rvdgi2Y6I+rbfDKx9B2AOp5lfL8C4+bNP1oyR6pbzKQ9Z1:WWiRkKx9kzNfYC4051epbz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
667ab18992422c1ba02d26bcd9ecab8a_JaffaCakes118

Files

667ab18992422c1ba02d26bcd9ecab8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

428c4dda1a09bbc7d65915d438ed7b64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
Sleep
CloseHandle
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetModuleFileNameA
CreateProcessA
GetModuleHandleA
GetStartupInfoA

msvcrt

strstr
??2@YAPAXI@Z
_except_handler3
_access
atol
rand
srand
time
__CxxFrameHandler
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
sprintf
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ