885475020c9d3cb2ae806b04229f8070_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

885475020c9d3cb2ae806b04229f8070_JaffaCakes118
Size

97KB
MD5

885475020c9d3cb2ae806b04229f8070
SHA1

7bdf9299525042453f7ac2716b7c40e0cc3ea69d
SHA256

04319fe72dc5cf0d0dadfad1f9da0f7e48c738e87d8b55eb5e832b78e7e16f5e
SHA512

d219a781d2ad166f19d05979dd82bd3af7ee293ed27ee973b6f869750e7691dfc44786e868ead0443865e65839720cee62d0240c9ea815a5a821cb002d0921d7
SSDEEP

3072:WTBfggv/AbPFrkgCn4HibadJuVmDZ4HZCh6H:WTB7v/uFrJTCbaJ4mQZCq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
885475020c9d3cb2ae806b04229f8070_JaffaCakes118

Files

885475020c9d3cb2ae806b04229f8070_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43fe0af50edd36354e48b5dd01d1cfb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
__dllonexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcpy
_wcsdup
_EH_prolog
__CxxFrameHandler
free
wcslen
??2@YAPAXI@Z
wcscpy
_onexit
??3@YAXPAX@Z

kernel32

GetModuleHandleA
WriteFile
GetTempPathW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
SetFilePointer
ReadFile
GetTempFileNameW
DeleteFileW
CreateProcessW
CloseHandle
WaitForSingleObject
GetExitCodeProcess
GetStartupInfoA

user32

MessageBoxW

Sections

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ