f4e61a1dcc67925ade4bddbfc91bb7e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4e61a1dcc67925ade4bddbfc91bb7e5_JaffaCakes118
Size

228KB
MD5

f4e61a1dcc67925ade4bddbfc91bb7e5
SHA1

59164eb5e9b515caf9d74a5b8d3cb390c8ec82d8
SHA256

188fb13d89137cee8a2a0975e7314e059f8e4348c0b68838ea6b5fa418e96da6
SHA512

8f777610f416e8093021a6db88fcd4277d5613430c6eab6c5a8dbaebcb59575990c065c0b5f2c8a5dea6c87532000ae6169823ab4ffbad2cd4a34293a401bfec
SSDEEP

6144:Q3ouBn5oP8qxFrthTZW2665Qu46uYNUgK4F:MBn5oP8qxFrXv665Qu46uYuu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4e61a1dcc67925ade4bddbfc91bb7e5_JaffaCakes118

Files

f4e61a1dcc67925ade4bddbfc91bb7e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f1aa848ae6d60e1833485009c1268d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
??2@YAPAXI@Z
_except_handler3
sprintf
__p__fmode
__p__commode
srand
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
rand
_strnset
_mkdir
_strrev

kernel32

GetProcAddress
GetModuleFileNameA
DeleteFileA
Sleep
FindResourceA
WriteFile
GetTickCount
GetLocalTime
lstrlenA
FreeResource
CloseHandle
FreeLibrary
GetModuleHandleA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ