a4a22ddce905f34457f74b566ba751c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4a22ddce905f34457f74b566ba751c5_JaffaCakes118
Size

80KB
MD5

a4a22ddce905f34457f74b566ba751c5
SHA1

c1a5e05a4215482f7fa9369d05877f5324cb930c
SHA256

18a69b44f5be9e03553763c780826421ebecd5fb063a4a0009019b238b917765
SHA512

946cf34ef5131d7a9e06e998e8221ee0031e82f4e888d2cece6e448a1a15ce52ecb7636ed0025d7f137981a545aad7bf8f095309c80fa38cbd85cbd5ce8bd19a
SSDEEP

1536:1kivC9qbgIU1DPs1qsGkB4wLZ0YzF7ozrZ/5WrxB8c8h3:RvsxIKD0IkqEF7ozrYrP6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4a22ddce905f34457f74b566ba751c5_JaffaCakes118

Files

a4a22ddce905f34457f74b566ba751c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f279f0f1148b0b354ee7eb70439ae072

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
LoadLibraryA
GetDriveTypeA
GetCurrentDirectoryA
lstrcmpW
OpenProcess
SetFileAttributesA
MoveFileA
GetLastError
lstrcpyA
SetLastError
lstrcatA
Beep
GetProcAddress

user32

ExitWindowsEx
FindWindowA
GetWindowThreadProcessId

shell32

ShellExecuteA

msvcrt

exit
tolower
_ftol
pow
srand
time
sscanf
calloc
memset
free
sprintf
rand
strcpy
memcpy
_except_handler3
strlen
atoi
strstr
malloc
puts
_isctype
strchr

advapi32

GetUserNameA

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ