38d54d99a02641a72e8ba3b988ad420f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38d54d99a02641a72e8ba3b988ad420f_JaffaCakes118
Size

76KB
MD5

38d54d99a02641a72e8ba3b988ad420f
SHA1

9e163fd46e3d3d448dd5353e5e57a11f704b87b5
SHA256

c4e757c2ea4a15d71efe6cfadd62ec3284b01720a83a6be762a208d11f369bd6
SHA512

89a44f5f2bd27eb13e8a1d95daf5a583f291e7a45352a98df7e43b1b817c27329ba8d540a7500ea976e1c40736ca761487fdb5cac3e7ccbb133a80bb3cdb3239
SSDEEP

1536:xuB9j82o/DfPRUi0WyUG/eQpMNX67VVUnWOmVrj+C5r0lM:wBB8zDfPRycG/HiXZnGVmCwM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38d54d99a02641a72e8ba3b988ad420f_JaffaCakes118

Files

38d54d99a02641a72e8ba3b988ad420f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

138e4a7206e25dc2e617507c025a11b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
Sleep
DeleteFileA
WaitForSingleObject
CreateProcessA
lstrcmpA
SetEndOfFile
SetFilePointer
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetLastError
CreateFileA
lstrcpyA
GetTempPathA
GetModuleHandleA
GetStartupInfoA

user32

wsprintfA

shell32

ShellExecuteA

msvcrt

__p__commode
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__dllonexit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1002B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fyf
Size: 56KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE