9ff84c9ffa5d28245bfeb300e7b9f84c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ff84c9ffa5d28245bfeb300e7b9f84c_JaffaCakes118
Size

7KB
MD5

9ff84c9ffa5d28245bfeb300e7b9f84c
SHA1

2fd2e6210aeeef26257cadc76cd5d05cd2309787
SHA256

4051aff2bdc3454f598c54094770e915bb1c7accbab9e694d5101a3e488296a1
SHA512

3877921230c5f0c11f2107d4971d0f79c376f2645b13c10ee66b5550caf2af1ca57d40c226b79f56188fb28404663761c1fd1e557b8ebdb2d6310f45d31fcf37
SSDEEP

96:6Aq1OF3mDbmwFUtboynJW+YxJixjlj+ubUyOALgEy4s:I1OFR1oynJW+cJGlj+fzARs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ff84c9ffa5d28245bfeb300e7b9f84c_JaffaCakes118

Files

9ff84c9ffa5d28245bfeb300e7b9f84c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d0661fdd4608fa41f56e294fed38071

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

calloc
??3@YAXPAX@Z
??2@YAPAXI@Z
_mbslen
_strdup
_onexit
_exit
__CxxFrameHandler
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcpy
memcpy
_EH_prolog
free
_itoa
__dllonexit
_XcptFilter

kernel32

GetStartupInfoA
WriteFile
CreateFileA
SetFilePointer
GetTempPathA
GetTempFileNameA
DeleteFileA
ReadFile
CloseHandle
WaitForSingleObject
CreateProcessA
GetModuleHandleA
GetModuleFileNameA
GetExitCodeProcess

user32

MessageBoxA

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ