891f509a73fe293f744d018d0c9d1a52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

891f509a73fe293f744d018d0c9d1a52_JaffaCakes118
Size

61KB
MD5

891f509a73fe293f744d018d0c9d1a52
SHA1

c2a4bab24e1651d009c77e7338b2e41aae2508f8
SHA256

b8e40c2f1cb8d45ff379e4f06fcf00fe1607de0e6291f6400f15db86739bd36f
SHA512

6ed7abb63537de85ede18f59f5a87ba6f1db22e7e6be207dce8f74662de16157b527e77b7835409d9135984361fcefc25fc15a9cfb578913b326e424dc4eeb40
SSDEEP

1536:lcoqWn6HfYd88tSZ05G65yB/k8qLQvyLK8rabM:l3/nyAhtM0YEm/k8eLn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
891f509a73fe293f744d018d0c9d1a52_JaffaCakes118

Files

891f509a73fe293f744d018d0c9d1a52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f590061732519fc9fa26f53519dcd69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateSemaphoreA
DeleteFileA
ExitProcess
FindFirstFileA
GetCommandLineA
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
MoveFileExA
RemoveDirectoryA
SetCurrentDirectoryA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__set_app_type
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
atexit
fclose
fgets
fopen
signal

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aeqm
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE