1498c9761fc819d496171c71604c2128_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1498c9761fc819d496171c71604c2128_JaffaCakes118
Size

185KB
MD5

1498c9761fc819d496171c71604c2128
SHA1

96e0acc4e3408ee83b377c021f9dd9aa9f2b1995
SHA256

9593cbcfdee23bb9e8fa7a8cda89b2122dfc525540164b4e61f88496adec4245
SHA512

e3041540a02e57377a3498158dee103e268e813b1122b47ea94b6d448836f64f51150474186c0ae515d28b8d6fc85dc7b7e41be265d06ffd1957939cdc0a9d46
SSDEEP

3072:Od0r86TxlXawnE+JFmbucTLymh5DzHfSFDvHouGbcmabVXey:OZ6T/XlE+7mPqmhRHfS5vqDal

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1498c9761fc819d496171c71604c2128_JaffaCakes118

Files

1498c9761fc819d496171c71604c2128_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5f2813135fb78f2624a240cdf06c683

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
ReadFile
GetFileSize
CloseHandle
CreateFileA
DeleteFileA
SizeofResource
GetProcAddress
GetModuleHandleA
CreateProcessA
GetEnvironmentVariableA
SetFileTime
GetFileTime
GetWindowsDirectoryA
SetFileAttributesA
CreateDirectoryA
GetStartupInfoA

shell32

ShellExecuteA

msvcrt

__setusermatherr
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ