dfdefbf4f53c0e8486cf8db0cc64ae86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfdefbf4f53c0e8486cf8db0cc64ae86_JaffaCakes118
Size

32KB
MD5

dfdefbf4f53c0e8486cf8db0cc64ae86
SHA1

18c50ef88c0e140946f5d0a779c19b9c1be5420d
SHA256

5b391a441fe17f07ff6ae79a5a7e6b815520c4b501bffc6f0fcfb842b3d73022
SHA512

7d6be5bdebd094cd59d71c8e9d66a7801de467001269c9bfe8a820fbf2496cb66a9279a5c3afa71c0f193e0186a811cc413a26aa99de7b63ec19f7c2009d0b8f
SSDEEP

96:A64a1vcCgksQucL4TyPyrMIBRb5Ptboynu+3ru:A6FEBcL4gQBbP1oynu+S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfdefbf4f53c0e8486cf8db0cc64ae86_JaffaCakes118

Files

dfdefbf4f53c0e8486cf8db0cc64ae86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c9449330c4f03b6524bacba296ae886

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA
ShellExecuteA

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
_initterm
__set_app_type
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
sprintf
strchr
strcat
strcpy
fopen
fprintf
fclose
__p__fmode

kernel32

GetStartupInfoA
GetModuleHandleA
WinExec
CreateFileA
CloseHandle
GetFileTime
SetFileTime
GetWindowsDirectoryA
DeleteFileA
FindFirstFileA
CopyFileA
FindNextFileA
FindClose
GetModuleFileNameA
Sleep

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdat!
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE