78a56328ab61ac76175e09d65fe0115b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78a56328ab61ac76175e09d65fe0115b_JaffaCakes118
Size

194KB
MD5

78a56328ab61ac76175e09d65fe0115b
SHA1

10c27a8ced974b2546c0e55f60baf8be0b84033f
SHA256

c23cee38d63f4132c5d44be1f2d5646a7b2ff98ee8a7da7af49eedc689f6ec13
SHA512

1030ad5f63b5cd55f281a34730b85a5d45850f81674430e2d67c203341b4d45588f62ac54cc2a060653698303440ff43135e3b12dd19e5f34cf780502ed2e0ed
SSDEEP

3072:XlKpmWejsoT0f58xCD55PjvvwlRjroGZm1YE6N3BioYVKg:RWejpYhcCD7D0W1YEG3Bib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78a56328ab61ac76175e09d65fe0115b_JaffaCakes118

Files

78a56328ab61ac76175e09d65fe0115b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

687f38e819a3b76c0a655748413c9931

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
CloseHandle
lstrlenA
WriteFile
SizeofResource
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
LoadResource
FindResourceA
GetTickCount
GetTempPathA
lstrcpyA
lstrcmpiA
SetLastError
MoveFileA
LoadLibraryA
lstrcatA
GetFileAttributesA
lstrcmpA
GetSystemDirectoryA
GetModuleFileNameA
ExitProcess
Sleep
WinExec
SetFileAttributesA
GetProcAddress
DeleteFileA

user32

wsprintfA

msvcrt

malloc
memset
??2@YAPAXI@Z
memcpy
strchr
__CxxFrameHandler
_EH_prolog
_CxxThrowException
realloc
strlen
??3@YAXPAX@Z
_except_handler3
strcat
??1type_info@@UAE@XZ

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ