aa96121d5372d12bc3d5891f5a59803c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa96121d5372d12bc3d5891f5a59803c_JaffaCakes118
Size

41KB
MD5

aa96121d5372d12bc3d5891f5a59803c
SHA1

7fe8b3cfbc0d61bcf760f37fd0d0425153be62ee
SHA256

0484c545ab0f66e76665c780feb6dcda1fba7e4dbc396d3ea8de1a123a4f538b
SHA512

9e9d6af38395fa4a5f5c2be79f72b93f345af6f4b3691b11dfb7060d94f02a021ce17a3ef4da4d6ab85d5c080d486d19f10518b893e1a804c05df95484e2f3b7
SSDEEP

768:tX6ien2ZQgZqVWUxqZDmFJoWCU6tuKYlgxxMNwhbEDhziIGIELO15UwBKJy3k:thyVX4ZnU6thxxNEDhziZLDZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa96121d5372d12bc3d5891f5a59803c_JaffaCakes118

Files

aa96121d5372d12bc3d5891f5a59803c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ed3fcad6d0e50f4f8bb96fc778e194f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
UnmapViewOfFile
FlushViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
Sleep
DeleteFileA
TerminateProcess
OpenProcess
WinExec
GetCurrentProcessId
CopyFileA
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
GetModuleFileNameA

shlwapi

PathFileExistsA

msvcrt

__p___initenv
__dllonexit
time
_mbsupr
sprintf
_ltoa
atoi
_mbsrchr
_except_handler3
_exit
_XcptFilter
exit
_onexit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

rpcrt4

UuidCreate
RpcStringFreeA
UuidToStringA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ