aca47d78cdf5511b14742f3f7b4f6c4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aca47d78cdf5511b14742f3f7b4f6c4e_JaffaCakes118
Size

10KB
MD5

aca47d78cdf5511b14742f3f7b4f6c4e
SHA1

355068275be5327b13c64841e5a08917dbbd9bbe
SHA256

0b97ce6f24525d3865a2ddf8c9d4e091397415e95cc8fdb9e8c48e84e385360a
SHA512

5d55b5a80d6e4bf2dc49137d6757e4b5461527939ad408369bfaa609cd5e2e4a7c00b3ef8e6d8ae6b58b2075369d31794b5d10ed9cafdadf53e7630370bce621
SSDEEP

192:4Rv033tYmCHe3euJp2gM4s1xv5X/ATR4SN5w:I833eHCJI/viTR4k5w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aca47d78cdf5511b14742f3f7b4f6c4e_JaffaCakes118

Files

aca47d78cdf5511b14742f3f7b4f6c4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d80ef94f6ce142b88d265ee4b76b795a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strncpy
strlen
strcat
memcpy

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetModuleFileNameA
GetCurrentThreadId
GetTickCount
HeapAlloc
HeapFree
FreeLibrary
LoadLibraryA
GetProcAddress
GetDriveTypeA
FindFirstFileA
FindClose
GetFileAttributesA
DeleteFileA
WriteFile
CloseHandle
CreateFileA
GetFileSize
SetFilePointer
ReadFile
HeapReAlloc

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.code
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ