c88e74a1023d2a84eb3048d5a341d32c_JaffaCakes118 | Triage

Sharing

General

Target

c88e74a1023d2a84eb3048d5a341d32c_JaffaCakes118
Size

508KB
MD5

c88e74a1023d2a84eb3048d5a341d32c
SHA1

7e5bee7bfa8370159f53059ca2d2e344004489bb
SHA256

4332c5616ead17a5981a36e70a051e0a51e17a74d88e0ef3914c47d4be2f63d8
SHA512

633e720ec19ac9e68271214c8132fb38e9c0b0732d3ca8e08a2c6ee304162f7eac393c6745b4a6c313cbbe1b9e2585cb2c2a92cd7bc453945c5cbbb36b144d14
SSDEEP

48:6yeNSkGzQ3wM3mtCgIkL+sI4jPbHKaU1XU1Yd4uzUAMXTd94YG:4w5Kkyd4jG12qOYUXrG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c88e74a1023d2a84eb3048d5a341d32c_JaffaCakes118

Files

c88e74a1023d2a84eb3048d5a341d32c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63778de955205bc603864f248adaa640

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateFileA
GetFileSize
CloseHandle
GetModuleFileNameA
DeleteFileA
MoveFileA
FindFirstFileA
FindNextFileA
FindClose
GetCommandLineA
GetStartupInfoA
GetModuleHandleA

msvcrt

fopen
fclose
feof
fgetc
fputc
__set_app_type
_controlfp
exit
strstr

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE