d9a682a2eb135f3c4cc7cf60da15f8d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9a682a2eb135f3c4cc7cf60da15f8d4_JaffaCakes118
Size

4KB
MD5

d9a682a2eb135f3c4cc7cf60da15f8d4
SHA1

1acd002156f1ae69c27aa58c3cb28bf87cd3b000
SHA256

c627597d8a318d786182223a92446f7336a2b64c30545629838c6ed47f258f73
SHA512

a48161f34db4414dcd7a0c217c8a765cea585dccf4e1982ee0ae25396914f19ad980ff857d7415f00afbecc4cb6bd82bc109e078610a39561bc26824f316e191
SSDEEP

48:a4fI8Am8Hrf6/1zGJonnK0aVCR7Ptboyl1MVOOfCW:tI8AXLf6NzZnK0CCR7PtboynMVOaCW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9a682a2eb135f3c4cc7cf60da15f8d4_JaffaCakes118

Files

d9a682a2eb135f3c4cc7cf60da15f8d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c637582d94fd801a3dd02deed462e13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
MoveFileExA
Sleep
CopyFileA
lstrcatA
GetSystemDirectoryA
GetModuleHandleA
GetStartupInfoA

msvcrt

fwrite
fopen
_exit
_XcptFilter
exit
fclose
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
sprintf
_acmdln

Sections

.text
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE