007bf4777f0e054775b9e57b908848f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

007bf4777f0e054775b9e57b908848f8_JaffaCakes118
Size

20KB
MD5

007bf4777f0e054775b9e57b908848f8
SHA1

8a0b9d31ecf864fc68aa6020870ca2760100b09c
SHA256

e76555b7d581924279dd88f91af2c6475dfe38252e76d512bd89c5207ef548ca
SHA512

f5f7d08600a67a26572fa6927b4adf9fa505ae74bed8e87e2e8d7907df5f410720a66fb866604aa4ca937a3e32a40df5c63cec40d00312e43d0af51a6c7283db
SSDEEP

384:a6FoeTgjREFhbH6nOg2X+6cz1j+IFgLBdhbUV+wEk7m:jSqgjREanOtG5CVBdVm+ZZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
007bf4777f0e054775b9e57b908848f8_JaffaCakes118

Files

007bf4777f0e054775b9e57b908848f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d5ffb3e78032b29e96bfa99d8ef0b2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
GetVolumeInformationA
GetTempFileNameA
Sleep
GetModuleFileNameA
GetTempPathA
CreateProcessA
GetTickCount
ExitProcess
CreateThread
GetLastError
CreateFileMappingA
GetModuleHandleA
GetStartupInfoA

msvcrt

fclose
ftell
fseek
fopen
toupper
fread
strcpy
calloc
_except_handler3
malloc
atoi
fputs
strlen
strcat
rand
strstr
strrchr
strcmp
memset
strtok
srand
__argv
__argc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
fwrite
_strdup
_strcmpi
_unlink

Sections

.bss
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE