128dff0dc0ac476b205918b6656a0d65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

128dff0dc0ac476b205918b6656a0d65_JaffaCakes118
Size

33KB
MD5

128dff0dc0ac476b205918b6656a0d65
SHA1

e47fb372175ae8127e212c1dbcf3379b93088d89
SHA256

92b145c6f36fff90b62d5b9c96c7f770d25e24cf69f1bd91125c4b005ab40a3b
SHA512

f089479f5becc830fe4ed0574673940a08c09f69e57e109f81954ee0f6d14335921680eceb2404d30addd1511ea25b7c12df1427516c13c54ae51b91b0a868d9
SSDEEP

768:nuCPRFiC6n26sh2zfaf9p26E8XI/BKr/Espif7OyqCh9w/HyV2kvk7gBi:ugCs4a9p2t8X0gsRKyq6MD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
128dff0dc0ac476b205918b6656a0d65_JaffaCakes118

Files

128dff0dc0ac476b205918b6656a0d65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ed8ebb570a573c7a6dd98b76cc39e58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
WinExec
DeleteFileA
CopyFileA
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
GetModuleFileNameA

msvcrt

time
_mbsupr
sprintf
_ltoa
strlen
_mbsrchr
_except_handler3
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 250B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ