e03604bfb3cdb0ffa8dd9adc6665cf5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e03604bfb3cdb0ffa8dd9adc6665cf5a_JaffaCakes118
Size

44KB
MD5

e03604bfb3cdb0ffa8dd9adc6665cf5a
SHA1

93f98689db521cdf90f9b6e74e4839c855272cf3
SHA256

c064f397b244ed716279ba2db78e1ae8eb4fdc201b37c9452d5e8020ec7e9b72
SHA512

7e5403bedfbe99d73158678c2a83b2c0b06006e74dd33e538fe05375c451ab655b8beacaf09eea3a5533bf107d2983d5cb51b52306bcb356998e3cbf8d1231bf
SSDEEP

384:8PKKWT91xzZRWR8LZBHtZH3LM08ssKkMl9w/+bfgWAyW:8ZW/xlRWRa782k33

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e03604bfb3cdb0ffa8dd9adc6665cf5a_JaffaCakes118

Files

e03604bfb3cdb0ffa8dd9adc6665cf5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

476175f00f91755f73952ef25d24ef49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameA
GetTempFileNameA
GetTempPathA
OpenMutexA
ExpandEnvironmentStringsA
GetModuleFileNameA
DeleteFileA
GetLastError
CreateProcessA
CloseHandle
GetModuleHandleA
GetStartupInfoA

advapi32

CloseServiceHandle

msvcrt

__p__fmode
fclose
fprintf
printf
fopen
_local_unwind2
sprintf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_except_handler3
__set_app_type
_controlfp

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ