dfa83bae7ff5c35dd80f3021c70cca39_JaffaCakes118 | Triage

Sharing

General

Target

dfa83bae7ff5c35dd80f3021c70cca39_JaffaCakes118
Size

149KB
MD5

dfa83bae7ff5c35dd80f3021c70cca39
SHA1

0326e15d4c31d975dec3ffd69edefada303abfc1
SHA256

e9739463a3fe85e79297d0413c395879c13bf1f278f769af290adfb99fc9ac51
SHA512

c25db09fd6843495f6ad7fa0db8c446ded459a8e0efc3986fd7da47ac42cc859a33c9cdc5774122aaad1c4e88146b14d8a280e41e3a2ba9beca8338318b41788
SSDEEP

3072:MLtfI7ZVLOnb6Y42ftsKp3TGaP3pd0MtzLdfkiYK8IZI70z6wwXIS3:SAVLga2VsC3yaP3kWzub86wRS3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfa83bae7ff5c35dd80f3021c70cca39_JaffaCakes118

Files

dfa83bae7ff5c35dd80f3021c70cca39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cb0486d6b8e3cd9486417575a7404ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memcpy
memmove

kernel32

GetModuleFileNameA
lstrlenA
GetTempPathA
GetTempFileNameA
GetStartupInfoA
CreateProcessA
FindResourceA
SizeofResource
LoadResource
LockResource
CreateFileA
WriteFile
CloseHandle
FreeResource
GetModuleHandleA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ