a673b3eb25003de6f400bec716869db0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a673b3eb25003de6f400bec716869db0_JaffaCakes118
Size

242KB
MD5

a673b3eb25003de6f400bec716869db0
SHA1

5cb6b457fd16c2f94cf4c16e52a34188db07414f
SHA256

96ae57926f9e3b4842df8a40506fd764ca70da41d82a3ee4a83e1e9e329d3d92
SHA512

8fa7c2131a4014b3d122dab4780e734ebdbc17a4e22e92e386e15802767d39edaef1e93c77a7e7c73d441e72f465578fd4518b3b83e5540fab1c3983af23235c
SSDEEP

3072:PuWKIm66ZTxVljKo1kfiht8bH8BrZcB7/lbmsH7nWASaIVFCo3aojSTxBjUY+KAj:2DImRbKRO08H0bsmnR00ojw0KAdkZKS4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a673b3eb25003de6f400bec716869db0_JaffaCakes118

Files

a673b3eb25003de6f400bec716869db0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d47784dd88b08855798c0450d9276ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHSetValueA

shell32

SHGetSpecialFolderPathA
ShellExecuteA
SHCreateDirectoryExA

msvcrt

_adjust_fdiv
__setusermatherr
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
fopen
fclose
malloc
free
fwrite
srand
rand
sprintf
__p__commode

kernel32

lstrcatA
SleepEx
WritePrivateProfileStringA
OutputDebugStringA
CloseHandle
GetStartupInfoA
WinExec
GetTickCount
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
DeleteFileA

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 575KB - Virtual size: 575KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ