575a908ae453d2c9c800444c08b4ecc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

575a908ae453d2c9c800444c08b4ecc4_JaffaCakes118
Size

120KB
MD5

575a908ae453d2c9c800444c08b4ecc4
SHA1

cbdb68e0d8749b4ffbab795d73fd969bdb928365
SHA256

0638c69e8dbaf8ed1332f9616a9fd2ca499e877dcc0b2963dd3d7996ed374f2a
SHA512

e93c4ea50e17e905c998b9ddf02d8f99ae164a58919c1180b73bdb575444a960d8fff1bf173ccfac5f397320f3e44c356c6163e2c2c517e69754dd18a304bf70
SSDEEP

3072:Zp2QvteCzAn6aJQqWQpZVeWnL2frRdkJWIxKsUbX6e8ce6AFON:ZpLteCzAn6aZnvg1IXkkce6AF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
575a908ae453d2c9c800444c08b4ecc4_JaffaCakes118

Files

575a908ae453d2c9c800444c08b4ecc4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

10b94329086556ac1a96967ca5d58d7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CloseHandle
SetFileTime
LocalFileTimeToFileTime
FreeLibrary
CreateFileA
LoadResource
GetProcAddress
GetTickCount
OutputDebugStringA
LoadLibraryA
UnmapViewOfFile
GetLastError
GetFileSize
MapViewOfFile
CreateFileMappingA
GetCurrentProcess
GetCurrentThread
GetModuleHandleA
GetStartupInfoA

user32

wsprintfA

msvcrt

_acmdln
sprintf
strcat
memcpy
strlen
fclose
fwrite
fopen
_access
memset
strcpy
_exit
_XcptFilter
exit
fread
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

shlwapi

PathFileExistsA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ