a41e7b816cd3dd17d64dea68a20b9edb_JaffaCakes118 | Triage

Sharing

General

Target

a41e7b816cd3dd17d64dea68a20b9edb_JaffaCakes118
Size

20KB
MD5

a41e7b816cd3dd17d64dea68a20b9edb
SHA1

9c3d8255328735f414ef7a077b4573f6bf90c251
SHA256

f536e007d21b6d0e1f707ec428511c28ed6a3b0e843a1c65c82815828fe21ff5
SHA512

dad3343a773409d2bf0cea4d385e68a4801cb93f580cee3f22195986299ff1bbe256160a77aebc5a17e2de1c392eea40f9c8ababa306c863a34255e6dd169e32
SSDEEP

192:Gso2rS54diNvzUNsLqhqJf35TwFP4sbjzP1oyPqQ9Z1:gt35TwFP4231R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a41e7b816cd3dd17d64dea68a20b9edb_JaffaCakes118

Files

a41e7b816cd3dd17d64dea68a20b9edb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09e86adfd0d4244a74e774df90bf9e75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CloseHandle
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetModuleFileNameA
CreateProcessA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetModuleHandleA
GetStartupInfoA

msvcrt

_except_handler3
_access
sprintf
rand
??2@YAPAXI@Z
time
__CxxFrameHandler
atol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
srand
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ