09c307f40852b8b0ccf8cee00a56f175_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09c307f40852b8b0ccf8cee00a56f175_JaffaCakes118
Size

106KB
MD5

09c307f40852b8b0ccf8cee00a56f175
SHA1

82daccc7a31aa4d476a40d6c59c632950b90668d
SHA256

a672953e3c4cb30f843622b5ce6ecff99478764d46239797600808f9eaa42696
SHA512

102c907d00c38fb57198aa754f65b48dfeb485103b0847b911c9407e1534010edd443cc18cac1aa1a11202c8b5f4aeb3b969b355156b91f42f8d77ba3eb66ec0
SSDEEP

768:8ObFBqsSx5nO4rGQzTGfqc33emu4v/eo4z7VP7LdGSu2HyTAzfMgTAzfM0CAYW2O:8GoEQhd54vuW2xOUAT0jMyR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09c307f40852b8b0ccf8cee00a56f175_JaffaCakes118

Files

09c307f40852b8b0ccf8cee00a56f175_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e3e81cdbdc955db65b24683e5d339271

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
CreateProcessA
CreateDirectoryA
_lopen
GetTempPathA
CloseHandle
WriteFile
LockResource
CreateFileA
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
GetStartupInfoA

user32

LoadStringA

shell32

ShellExecuteExA
SHChangeNotify

msvcrt

_controlfp
strstr
sprintf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ