846678da881800b9214454a3be4766c7_JaffaCakes118 | Triage

Sharing

General

Target

846678da881800b9214454a3be4766c7_JaffaCakes118
Size

68KB
MD5

846678da881800b9214454a3be4766c7
SHA1

8fa590ffd84eea87c591972d961ea5cba494cd64
SHA256

8d7c8dbc8ea40d91050f46a36098f5884de97992780def568ea5b7c414681cb9
SHA512

ea0e62c8289c4aa90bed2c068b27657f501ea4740766ee3f9a08ae89cd59de5e2904afa048798c240618588455075f71a9f41fb43ed6bb835fc939ba8f7347b4
SSDEEP

768:uXzlX7m2PX2uC3P1UtKzlJsEqDlEVBRDKwsB9nMZnANQ1N/4U7rYxamg46MVpo:uD02PX2uCUtT9DlkBRDPsBcs0WpgX6O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
846678da881800b9214454a3be4766c7_JaffaCakes118

Files

846678da881800b9214454a3be4766c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46754309cc4fdd98a864e6c997da1659

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

send

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_exit
strtok
atoi
malloc
rand
sprintf
free
fopen
fclose
_adjust_fdiv
_controlfp

kernel32

GetModuleFileNameA
GetCommandLineA
CreateFileA
WriteFile
CloseHandle
GetProcAddress
OutputDebugStringA
Sleep
GetModuleHandleA
GetStartupInfoA
DeleteFileA

user32

MessageBoxA

shell32

SHGetSpecialFolderPathA
SHGetFileInfoA

ole32

CoInitialize
CoCreateInstance

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE