a0a51b348fc829e4e7d31c8c8a3bfabf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0a51b348fc829e4e7d31c8c8a3bfabf_JaffaCakes118
Size

32KB
MD5

a0a51b348fc829e4e7d31c8c8a3bfabf
SHA1

1d6361f6bd0ee626118f4cc13167bd3bd48e4209
SHA256

50ac45f6aee9baf5233cefb74eb24b173080c26212525d9d4ad0ff556634c54a
SHA512

eecc57cf1433c721582c4784784b259f7c1e6d9f20128a4872a3358d44a50a88119d72112f7f64d5e640ad65b1a60036b4f10648d0ff312f5a69f572abfe052f
SSDEEP

768:fLFLuBLipKGhOnt+nuXgai0SGo6YeQ2CI3/fP9yDk0:fLM6OnbXI0/o6Yez3ID

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0a51b348fc829e4e7d31c8c8a3bfabf_JaffaCakes118

Files

a0a51b348fc829e4e7d31c8c8a3bfabf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8129200420ae2a26ff715f77131e71ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
WinExec
DeleteFileA
CopyFileA
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
GetModuleFileNameA

msvcrt

time
sprintf
_mbsupr
strcat
_ltoa
strlen
_except_handler3
_mbsrchr
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ