0f3a5627f84b30ebf368248091a53cdc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f3a5627f84b30ebf368248091a53cdc_JaffaCakes118
Size

40KB
MD5

0f3a5627f84b30ebf368248091a53cdc
SHA1

8d96a9fae9d5b0c40fc1bfcd1f8203b4a33be9f2
SHA256

aa7fcaed8e633ff3cfee3741a883101e20c5ee91928ab2c91bddddcaa79f0a20
SHA512

b3ec3e295df362aa6fd755744c5de16b11727f66a6c3f3ed2e3b84c5af0a291b430bf7c4df1b41653ea14da89e3db42bb9634d2a4d6f674f76c77f5b66ca14cf
SSDEEP

768:V26N5Y0Ps7wVl0VCAuo/gj9RpzNFEIGvTQgNTb9isGY+5UIik81:V26N5JzDocfpzT5GbQeTAZY+uf1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f3a5627f84b30ebf368248091a53cdc_JaffaCakes118

Files

0f3a5627f84b30ebf368248091a53cdc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17cdd3997389c13fdc97c5a23df1c27c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
WaitForSingleObject
CreateProcessA
ReadFile
CreateFileA
DeleteFileA
WriteFile
CloseHandle
GetSystemDirectoryA

msvcrt

sprintf
_exit
_XcptFilter
strstr
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 672B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE