JaffaCakes118_cb69584111a561a5896145438b009024 | Triage

Sharing

General

Target

JaffaCakes118_cb69584111a561a5896145438b009024
Size

88KB
MD5

cb69584111a561a5896145438b009024
SHA1

5a05dbfeb616acbe102d3ad1f9ff5387e2c50bdb
SHA256

28aad1239f02b00a79a7ae67feca4f9b41d8ab40710855b2142d03c81500b422
SHA512

9e5b060dfa66ad7743b3e7602b2d45255284b47cd2a2809889312de6d92c74ca771346fa815f4b95d917dcec4fff89f593861f34f04e260003b714b112a3a056
SSDEEP

1536:XXPeXonnUStQXDI4spvVp+N8NECtH3/ItaRmtmhDA2B/w:XAgnUStM0BFn+N8FP2acIhDp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_cb69584111a561a5896145438b009024

Files

JaffaCakes118_cb69584111a561a5896145438b009024
.exe windows:4 windows x86 arch:x86

2297193c56939c117ff494073c528fab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

send

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_exit
rand
sprintf
malloc
strtok
atoi
free
fopen
fclose
_adjust_fdiv
_controlfp

kernel32

GetModuleFileNameA
GetCommandLineA
CreateFileA
WriteFile
CloseHandle
GetModuleHandleA
GetProcAddress
Sleep
OutputDebugStringA
GetStartupInfoA
DeleteFileA

user32

MessageBoxA

shell32

SHGetSpecialFolderPathA
SHGetFileInfoA

ole32

CoInitialize
CoCreateInstance

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE