143dc5df3b1c7ece1f04b5c6f762b372_JaffaCakes118 | Triage

Sharing

General

Target

143dc5df3b1c7ece1f04b5c6f762b372_JaffaCakes118
Size

136KB
MD5

143dc5df3b1c7ece1f04b5c6f762b372
SHA1

5cb6485bc59f48607f88573fdf4186fdef291bb1
SHA256

c94fe1c9a9062844aaf7656c4f9786bf3c329b381985fb6c9d03a8c4c85418b4
SHA512

62b2c0fb270117ac88a473b30fa8c3b7845f1d204d5fb95d25e7f8a1c749ab3226027cfb106dfd908a24f03747fc4d0b89e83c0d4e007855c46bf2a0eb81f404
SSDEEP

3072:XgC3fhHZx0WWcRcmj1OqZ8QRguRi43Pa+VhBh1Eima:J3fhHZx0W9RZj1jguRiaasjh1Lma

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
143dc5df3b1c7ece1f04b5c6f762b372_JaffaCakes118

Files

143dc5df3b1c7ece1f04b5c6f762b372_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6fd7419296888f796f57ba3720add424

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetModuleFileNameA
GetTempPathA
CloseHandle
CreateFileA
Sleep
GetModuleHandleA
GetStartupInfoA

user32

PostQuitMessage
DefWindowProcA
ShowWindow
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA

urlmon

URLDownloadToFileA

msvcrt

_XcptFilter
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
srand
time
rand
_adjust_fdiv
sprintf
fwrite
fopen
_exit
fclose
exit
_acmdln
__getmainargs
_initterm
__setusermatherr

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ