8300983779b16061b6d606b77d92dbb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8300983779b16061b6d606b77d92dbb5_JaffaCakes118
Size

1.1MB
MD5

8300983779b16061b6d606b77d92dbb5
SHA1

4ad15bbf31b42a755c2b11439707a9092d750c8a
SHA256

1318a96e011d657d13cd9dd8d8c4151febec07e19e350440d07e665d1f08e4c8
SHA512

18f3ebeb0185c1a4d8104cf95f35ad0926593b7b55afa01ce1d50f785e3ffffdf29a79fe818f693493cb6229cc91c202d3504cada1bd5c0fbccc5c40471a7030
SSDEEP

24576:HqmMc/j15a5xure7Me7UfdM3xnl/awUEPpzYRQQyjgmpH:HRbjK5Ye7CMX9UEPpzYRQQtmH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8300983779b16061b6d606b77d92dbb5_JaffaCakes118

Files

8300983779b16061b6d606b77d92dbb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d0661fdd4608fa41f56e294fed38071

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

calloc
??3@YAXPAX@Z
??2@YAPAXI@Z
_mbslen
_strdup
_onexit
_exit
__CxxFrameHandler
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcpy
memcpy
_EH_prolog
free
_itoa
__dllonexit
_XcptFilter

kernel32

GetStartupInfoA
WriteFile
CreateFileA
SetFilePointer
GetTempPathA
GetTempFileNameA
DeleteFileA
ReadFile
CloseHandle
WaitForSingleObject
CreateProcessA
GetModuleHandleA
GetModuleFileNameA
GetExitCodeProcess

user32

MessageBoxA

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ