a17e7d28f32254e33e968750ef8028a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a17e7d28f32254e33e968750ef8028a6_JaffaCakes118
Size

97KB
MD5

a17e7d28f32254e33e968750ef8028a6
SHA1

3b9317d63e489c56f75e255ba6a2e4ba1a1f4b75
SHA256

4ac2063c3061edc20a58c272a6070abd16f7c46a5c9c2b7da15ae5e08e5798e6
SHA512

5e7dd91e64dc5be07c2db9b6472a385b3a3b2f93e347fafac8657f70c6a106cc66ffdabe92301d0c5cc55060a551a14a9ccdb36291e9612407bc9e6dad750a04
SSDEEP

3072:WTBfggv/AbPFrkgCn4HibB1t1vMn6z5OH3ZcmV68Tu:WTB7v/uFrJTCbBb5MnMOXOITu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a17e7d28f32254e33e968750ef8028a6_JaffaCakes118

Files

a17e7d28f32254e33e968750ef8028a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43fe0af50edd36354e48b5dd01d1cfb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
__dllonexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcpy
_wcsdup
_EH_prolog
__CxxFrameHandler
free
wcslen
??2@YAPAXI@Z
wcscpy
_onexit
??3@YAXPAX@Z

kernel32

GetModuleHandleA
WriteFile
GetTempPathW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
SetFilePointer
ReadFile
GetTempFileNameW
DeleteFileW
CreateProcessW
CloseHandle
WaitForSingleObject
GetExitCodeProcess
GetStartupInfoA

user32

MessageBoxW

Sections

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ