a7ce40bbc347d1a99400c6fe842948fa_JaffaCakes118 | Triage

Sharing

General

Target

a7ce40bbc347d1a99400c6fe842948fa_JaffaCakes118
Size

5KB
MD5

a7ce40bbc347d1a99400c6fe842948fa
SHA1

bc4a1901b3fa2a9cd0b9372c2dbdc14eb0976ff7
SHA256

92cc0b854fdfe3d2e94d2cecbe13833c41fffe1731ff66d13afd57f52e5d1755
SHA512

bb4764b6a718f2b708ee8842aa83dee1b01de88d5c2514b27cc9a409ca95bb04f00ecad26acbb890b922298f1e7e73d9fd30732f153dd34c3be8538e15e80396
SSDEEP

96:S2KKPZKKFHjnIsfdOPtboynMOWE+eIysmCRkqhn6J6cGwkkP:S21x1RjIsf8P1oyn6NeIyM6kw5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7ce40bbc347d1a99400c6fe842948fa_JaffaCakes118

Files

a7ce40bbc347d1a99400c6fe842948fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18661e80a75656f7d36b43d5142ccb7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetFileSize
CreateFileA
lstrcatA
lstrcpyA
lstrcpynA
CreateDirectoryA
DeleteFileA
CopyFileA
CreateProcessA
RemoveDirectoryA
CloseHandle
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
lstrlenA
Sleep
GetTempPathA
lstrcmpiA
GetTickCount
GetModuleFileNameA
GetModuleHandleA
FindClose
GetSystemDirectoryA
GetStartupInfoA

user32

FindWindowA
GetDesktopWindow
PostMessageA

gdi32

GetStockObject

shell32

ShellExecuteA

msvcrt

_initterm
_controlfp
strchr
__p___argv
__p___argc
strrchr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_except_handler3
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE