39d9784113918e4dd5e2539e66b74bdb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39d9784113918e4dd5e2539e66b74bdb_JaffaCakes118
Size

128KB
MD5

39d9784113918e4dd5e2539e66b74bdb
SHA1

f74bf4bd11f26187950e572c0cfe4cb293114f7a
SHA256

dd43df21613f65976afdf4de125ac6d4714ef5de8e66f9162fce1b942d3f016e
SHA512

8aed7868bbfb4f457da678cd723971d263bc8926ed4be613ec779e982b71683fde855e0f30adb97ad77d38cf29dc54f5f915310abd24d61e288db5491d40f621
SSDEEP

1536:20LiLzWGv8qao14bxOsSndYKSeFg9jkz0xNscLX9i5vOWLfmlkUYAww7/LBh2yEx:7WzWS8qaoE+dFSP1+cLX97Lw2Bh1Eim1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39d9784113918e4dd5e2539e66b74bdb_JaffaCakes118

Files

39d9784113918e4dd5e2539e66b74bdb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9fb41db7833cb958bdce7f728edfd8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetModuleFileNameA
GetTempPathA
GetModuleHandleA
GetStartupInfoA

user32

PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
ShowWindow
DefWindowProcA
RegisterClassExA

msvcrt

_acmdln
_controlfp
_except_handler3
__set_app_type
srand
time
rand
fclose
sprintf
fwrite
fopen
__p__fmode
_XcptFilter
exit
_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

urlmon

URLDownloadToFileA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ