105e8c95571fcfdcae62acc39b34cd0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

105e8c95571fcfdcae62acc39b34cd0e_JaffaCakes118
Size

374KB
MD5

105e8c95571fcfdcae62acc39b34cd0e
SHA1

3455b0be62351e681b39f162a529118510228620
SHA256

bf22dbcf6fb4fddbc8ff81cdec220cd64d594bac4e581844157f8c9f9d63387e
SHA512

33961c834369ba8fcf202c0942a48802d2b7674ec3c2be5f85ac2d860c69a190785dd9587980afa887a5c067246735eeaf41e391ce056c26272a1fec8d5117e2
SSDEEP

6144:SHJ6MWoVzpT1Z7emqfjFmMlBRUCmSplt6u9xg81PGktaPe8MohFrv5ulCy8AVeM:SsrorbeVlBGFS7r9xg8HgjFr/AVx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
105e8c95571fcfdcae62acc39b34cd0e_JaffaCakes118

Files

105e8c95571fcfdcae62acc39b34cd0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e0edc215c569349c418e61c9aa432b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
Sleep
CloseHandle
DeleteFileA
CreateDirectoryA
GetTempPathA
ReadFile
SetFilePointer
GetFileSize
GetLastError
CreateFileA
GetModuleFileNameA
SetLastError
GetCommandLineA
WritePrivateProfileStringA
LocalFree
FormatMessageA
GetTempFileNameA
WriteFile
GetExitCodeProcess
OpenProcess
CreateProcessA
HeapAlloc
GetProcessHeap
HeapFree
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime

user32

SetCursor
LoadCursorA
DispatchMessageA
PeekMessageA
wsprintfA
MessageBoxA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ