2158461faf0b41fbfefeeb327cd443fc_JaffaCakes118 | Triage

Sharing

General

Target

2158461faf0b41fbfefeeb327cd443fc_JaffaCakes118
Size

507KB
MD5

2158461faf0b41fbfefeeb327cd443fc
SHA1

fde210f146fc102a4fb208fdd01da17fbba14910
SHA256

e246d9a3ac41af83e98c9728f9d563d9fb711a6a463dc1e410eaa60193209d06
SHA512

6f027188034a26aed258aff4ffde82d62f5665eae918c346e33a4a402ae92d1ecd0a5c1b19672a5f21f4e1bf0a487036c10a9901c11a3e904a4416ff5c18c09f
SSDEEP

12288:GdeA9Zuy9YaWdTVG8CzcyzPXzqVLHSA4Stu1oGg9CeRkdjpY9:PW79YaWdRG8jyzPXzqVzSAtturgBkhp6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2158461faf0b41fbfefeeb327cd443fc_JaffaCakes118

Files

2158461faf0b41fbfefeeb327cd443fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c06456c919add16c1d5d3cbe34c37815

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
_initterm
__set_app_type
_except_handler3
_controlfp
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
exit
memcpy
??2@YAPAXI@Z
_wcsdup
??3@YAXPAX@Z
free
__p__fmode

kernel32

GetModuleHandleA
GetTempPathW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
SetFilePointer
CloseHandle
GetTempFileNameW
FreeLibrary
DeleteFileW
WriteFile
ReadFile
LoadLibraryW
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ