aa5da8c22674988780404c03517bb5af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa5da8c22674988780404c03517bb5af_JaffaCakes118
Size

91KB
MD5

aa5da8c22674988780404c03517bb5af
SHA1

c4d281a516728287a82f969a3b32bf06079e772d
SHA256

fa7cfa5ac2508b0568a025c9c3b004367cb61010a460f863ce8e3f4bef127163
SHA512

bc69d9d7b7aa5e75bb2f3d3e2ba82fc7806c85ed917a985c1a6d40adef76f9239724e5c3b23bef85ae9d3e4440f23ed8871ca028d1ffdc0ef163627329615ba7
SSDEEP

1536:QVDcmsuSg+VQ1pnZp5UDv3u/Cs/2A+p4j3mWNqk4lQdZo9XeYWF2ha2zn:QVDkCUQNpuDv3u/cjp4j7NqkE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa5da8c22674988780404c03517bb5af_JaffaCakes118

Files

aa5da8c22674988780404c03517bb5af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8178917f6291398d9461597facf6d76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceA
MoveFileExA
GetModuleFileNameA
DeleteFileA
GetModuleHandleA
GetStartupInfoA

msvcrt

calloc
strlen
fclose
fwrite
fopen
malloc
strcmp
strcat
strcpy
memcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
free
sprintf

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 842B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ