1448173f837be31eedc7a172aa05b9e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1448173f837be31eedc7a172aa05b9e7_JaffaCakes118
Size

36KB
MD5

1448173f837be31eedc7a172aa05b9e7
SHA1

6ed9af0e3b82405423b58d389e9bde4c44e68cae
SHA256

ac2be38f48a77752ca3e5529f9479d7c15cdf95bd8083902e5f0a43296a7f026
SHA512

5cfb8328b849ef775d804a96ace05b90804c946d926a59036d9c39e46a90e35718110d8b1746ae86ba40690a5ceca1093ca68b8a7ae2eeb9f82c194de9b6ebc0
SSDEEP

384:Sbkev31g+ODgBw6ipD9iBMPh9D7goXhhCfSa5AzD95uopqRxq11kJ:Stvlg+OtpD9iBMPhRlhha5onuzxS1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1448173f837be31eedc7a172aa05b9e7_JaffaCakes118

Files

1448173f837be31eedc7a172aa05b9e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c9449330c4f03b6524bacba296ae886

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA
ShellExecuteA

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
_initterm
__set_app_type
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
sprintf
strchr
strcat
strcpy
fopen
fprintf
fclose
__p__fmode

kernel32

GetStartupInfoA
GetModuleHandleA
WinExec
CreateFileA
CloseHandle
GetFileTime
SetFileTime
GetWindowsDirectoryA
DeleteFileA
FindFirstFileA
CopyFileA
FindNextFileA
FindClose
GetModuleFileNameA
Sleep

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE