376b4c8d17b91f570852303d932d434a_JaffaCakes118 | Triage

Sharing

General

Target

376b4c8d17b91f570852303d932d434a_JaffaCakes118
Size

4.9MB
MD5

376b4c8d17b91f570852303d932d434a
SHA1

db5f79563c5d46fdb351c31bacb892bc40320452
SHA256

5a2aa50697eee171cd552860f574b718c83fb58efb3786936a4f75506663bb7a
SHA512

8cb0347cb60d38087fd8ba95168917ba9c2977bc7b508d4d8e00cbe895f09e0205761ac62f5ad2e2a8aa67ef56767c59ed346c10a8423c0571b88af10f623df9
SSDEEP

98304:zig8EAPrNQyRUA3AKvd4vFikbCZ2gIbVkTHQ/O6+qti:zGEAhQHA3xyvFiWCZ2gIYQ/O6Rti

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
376b4c8d17b91f570852303d932d434a_JaffaCakes118

Files

376b4c8d17b91f570852303d932d434a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0dc8a0c263c0fc2358f5f301774dd12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
CreateFileA
CreateMutexA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetLastError
GetModuleFileNameA
GetTempPathA
InterlockedIncrement
ReadFile
ReleaseMutex
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
WriteFile

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
printf
signal
strcat
strcmp

shell32

ShellExecuteA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE