881418b8ae9f8bc3d16d7d624dd34fd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

881418b8ae9f8bc3d16d7d624dd34fd7_JaffaCakes118
Size

2.7MB
MD5

881418b8ae9f8bc3d16d7d624dd34fd7
SHA1

3599236ba0e17e15a8eadcf429e107fdd64720a8
SHA256

5a564cee4fd357380e04d388a8e4b76d275b576667fb4a4537d0c3d4076c056a
SHA512

8a32af76fad604861b8166ff348392214edd3186c20f389fdcdb47925a9745eab87f31e53c855a33b4fc1667050fe7b38eac1d546ad7339c17f1d72821474581
SSDEEP

49152:dK7tZ8oRNm7RNSigZHtCKoPMkmG52qnERnR:87tmoRN6RNbgZtoP4w26ERR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
881418b8ae9f8bc3d16d7d624dd34fd7_JaffaCakes118

Files

881418b8ae9f8bc3d16d7d624dd34fd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4837ec32a45d339514583709fdb3e191

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary

advapi32

GetUserNameA

msvcrt

sprintf
strcmp
strtok
strlen
strstr
__p__environ
memmove
malloc
realloc
strncpy
strncmp
_mkdir
_pctype
_isctype
__mb_cur_max
memcpy
memset
_rmdir
_findclose
_unlink
_findnext
_findfirst
fprintf
_iob
_errno
_strdup
_access
_stat
_strnicmp
_getpid
_close
_read
_lseek
_open
_spawnvpe
_chmod
_write
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 796KB - Virtual size: 793KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE