d1c330a48e5eb05a9903d44f55ea9de7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1c330a48e5eb05a9903d44f55ea9de7_JaffaCakes118
Size

49KB
MD5

d1c330a48e5eb05a9903d44f55ea9de7
SHA1

47b2f7b031799c507500e860240e835d615ffb64
SHA256

c860209c966d121a66b98ece8ea0496b2f56bf7caddbf7f604724961f73d1ae3
SHA512

a2bc47d49a69c946c0ee013d6abeb309ef19c0c5d2f195d26e0ce14e94961299f5cd8a6fffd5f4eb251209dd5536e8b8594fbf3fbfe7a904ab241a8e08184b80
SSDEEP

768:Ovf7AGZCApyZp9E31Fr8UiwxOXy60lE85lCfAb4Rn99eqHKj:E07TE31Fr8UdOy285w199eRj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1c330a48e5eb05a9903d44f55ea9de7_JaffaCakes118

Files

d1c330a48e5eb05a9903d44f55ea9de7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dab0cbe89b017d1eede3f14186da0599

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetLastError
GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetShortPathNameA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA

shell32

ShellExecuteA

msvcrt

??3@YAXPAX@Z
fclose
fwrite
fopen
fread
??2@YAPAXI@Z
fgets
ftell
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fseek

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ