aadbf8caf82c4c6e4e58feb1122979e3_JaffaCakes118 | Triage

Sharing

General

Target

aadbf8caf82c4c6e4e58feb1122979e3_JaffaCakes118
Size

120KB
MD5

aadbf8caf82c4c6e4e58feb1122979e3
SHA1

55834e7361b303404ab6d500529b0590151e76a0
SHA256

7fcb606e4e18b7620153deb36f60ca82153d778b255df9b61c05a01010f83100
SHA512

e08d3b3ed89c37d33ef2e2addf09b7402c9c43e1f866d8b5e39fb00b8939fe16d91986b6488cd4ea529a444c178158328ae4ef037b5078b94175147d959f2228
SSDEEP

3072:gTBfggv/AbPFrkgCn4Hib9f/X91UYOAC/HQGtBYf2p:gTB7v/uFrJTCb9fPz1OAY+fO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aadbf8caf82c4c6e4e58feb1122979e3_JaffaCakes118

Files

aadbf8caf82c4c6e4e58feb1122979e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43fe0af50edd36354e48b5dd01d1cfb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
__dllonexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcpy
_wcsdup
_EH_prolog
__CxxFrameHandler
free
wcslen
??2@YAPAXI@Z
wcscpy
_onexit
??3@YAXPAX@Z

kernel32

GetModuleHandleA
WriteFile
GetTempPathW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
SetFilePointer
ReadFile
GetTempFileNameW
DeleteFileW
CreateProcessW
CloseHandle
WaitForSingleObject
GetExitCodeProcess
GetStartupInfoA

user32

MessageBoxW

Sections

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ