JaffaCakes118_1905a71691153b39f6f589786de284e0 | Triage

Sharing

General

Target

JaffaCakes118_1905a71691153b39f6f589786de284e0
Size

641KB
MD5

1905a71691153b39f6f589786de284e0
SHA1

b50267b1bc65143803652f1d8e8cfd4835a4b5dd
SHA256

f42489d578a6d82c015d592c7f78639a3b3bfa05edd1bc267595a9fde3c2d8be
SHA512

e0bbd9b174cddea6b32988c06a72d98a6e7732221a6f749a1adb0067cc353f0a4ea7b7beba5bef2ce13cf8e0435c68febec628e4db6ad52e42de012628b07255
SSDEEP

12288:yXcpf8LHtqUmJW9KfNTR9zk2Q3YBLsEATjaNIjkzLbjjVtlYNGN:vf8YUGfNTuoBLsXjaNIIz3PHcGN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1905a71691153b39f6f589786de284e0

Files

JaffaCakes118_1905a71691153b39f6f589786de284e0
.exe windows:4 windows x86 arch:x86

86632da30434ccfc050190a47fb559c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
exit
memcpy
memset
_itow
??2@YAPAXI@Z
_wcsdup
??3@YAXPAX@Z
free
__p__commode

kernel32

GetModuleHandleA
GetTempPathW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
SetFilePointer
CloseHandle
GetTempFileNameW
FreeLibrary
DeleteFileW
WriteFile
ReadFile
LoadLibraryW
GetProcAddress
GetStartupInfoA

user32

MessageBoxW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ