eac055a744c85ec5d4c2c1c5524ffa93_JaffaCakes118 | Triage

Sharing

General

Target

eac055a744c85ec5d4c2c1c5524ffa93_JaffaCakes118
Size

148KB
MD5

eac055a744c85ec5d4c2c1c5524ffa93
SHA1

4c289fe627452de023c4458adf321a3c63a5a4ce
SHA256

bd1c9fd0e2f4f170580891b57fd343f7f4b0f0f97c1765ea50b7f56f50bfa31b
SHA512

dbf5853153dd3006a083bff89c5aac69e8a670e45b1170033db803d18637d9db117388905059cda8133af0c2cd4b3aabae9ab1f670ce53725ec7312be89694f5
SSDEEP

1536:OvljJrXTz6CCFU0/5njpko3P6eCAwSwDORsN7HzKF4mCEgDIJm0VvAmVzAzLnQ4N:OddaW0/5j5x8D6sd+gb09x8vN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eac055a744c85ec5d4c2c1c5524ffa93_JaffaCakes118

Files

eac055a744c85ec5d4c2c1c5524ffa93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fbac983c51c26a11a1d0d3515a7f330

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__getmainargs
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
??2@YAPAXI@Z
time
srand
rand
_snprintf
__p__fmode

kernel32.dll �

GetStartupInfoA
CreateThread
WaitForSingleObject
OutputDebugStringA
GetModuleFileNameA
CreateFileA
WriteFile
CloseHandle
GetCurrentDirectoryA
SetCurrentDirectoryA
GetModuleHandleA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE