886ac7c5d40b64ff975a9e3377374b30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

886ac7c5d40b64ff975a9e3377374b30_JaffaCakes118
Size

148KB
MD5

886ac7c5d40b64ff975a9e3377374b30
SHA1

04f66058a6af305f4b999667bd5a10c26f1dda38
SHA256

74240a2e49de79ea639624e269c1edd4f7ca10007f302d9c9b64340fc5536ea8
SHA512

e80f49e8a655ff6ab7b242e65147289de4e7f30d8e113abd4f32b29613d3b8ab3e4b5036d08c2bef465864db21cf77e2c616b91ddcce760dc774a83c51483bc6
SSDEEP

3072:yziUjE5x5q4QmiqKxXn/Yg1MxpQAStrvGfmdt:yziUjE32/YgKKntzGE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
886ac7c5d40b64ff975a9e3377374b30_JaffaCakes118

Files

886ac7c5d40b64ff975a9e3377374b30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fefcdd163b1c7a380e21eec951f07627

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__getmainargs
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
??2@YAPAXI@Z
time
srand
rand
_snprintf
__p__fmode

kernel32

GetStartupInfoA
CreateThread
WaitForSingleObject
OutputDebugStringA
GetModuleFileNameA
CreateFileA
WriteFile
CloseHandle
GetCurrentDirectoryA
SetCurrentDirectoryA
GetModuleHandleA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE