da4f9f40a4bc7eac821529360e2b9b1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da4f9f40a4bc7eac821529360e2b9b1a_JaffaCakes118
Size

972KB
MD5

da4f9f40a4bc7eac821529360e2b9b1a
SHA1

8e55dd23c17e3cdc8f0eb175862225e3a4a3115c
SHA256

f9e90a2145824291aebd18ab031a12da4a2dfff1eda818c783e5472593b8e909
SHA512

026a5f997f0e41be18b7605a64383c680791534b771d06310ec5be64bcbe0bb92538e30b0a9324ff10b4a6b14afc79675f5f8d560da332abdfbc0460b4f457b6
SSDEEP

24576:KLZtTuVOxn3Z836jzkMPk4uJW2RtQA32ra75:KLfT2OxO36jzkc3ctQA3P75

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da4f9f40a4bc7eac821529360e2b9b1a_JaffaCakes118

Files

da4f9f40a4bc7eac821529360e2b9b1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

daed8815b189a52123a2232800c0c495

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
CreatePipe
CreateFileA
SetLastError
WriteFile
TlsFree
CloseHandle
GetTempPathA
GetModuleFileNameA
ReadFile
GetFileSize
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

sprintf
memset
strrchr
strcpy
??3@YAXPAX@Z
strlen
strchr
strcmp
malloc
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcpy
??2@YAPAXI@Z

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 884KB - Virtual size: 881KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ