JaffaCakes118_f67c64be8bb93db370723315f4ac0a1f | Triage

Sharing

General

Target

JaffaCakes118_f67c64be8bb93db370723315f4ac0a1f
Size

277KB
MD5

f67c64be8bb93db370723315f4ac0a1f
SHA1

6d8dd3d3066841c5d339c92ed5954aa1a682b448
SHA256

dd7cd42fc5c87a3a4f218aad6bd571167aa8d10108f636ec0b4d835f80ccb7b9
SHA512

98e5e7ab18c9fdf80bbc540d1dc0d65970053255e72837533e90c0c7b34eafd677a6f78dd793484b11edcc58354caa0f4f110b430cbf98812a7219ee6bcc7531
SSDEEP

6144:lYQW71WfrbnGYV5HBUk2YvMbxKWPsHSpN8eiSBBmKRAkDc1Pps:lA71IrbGYVhB4Yv+KWrG1T1Bs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_f67c64be8bb93db370723315f4ac0a1f

Files

JaffaCakes118_f67c64be8bb93db370723315f4ac0a1f
.exe windows:4 windows x86 arch:x86

62b28a28cdb8b00a787e93828984256b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_onexit
__dllonexit
calloc
exit
memcpy
_itoa
??2@YAPAXI@Z
_strdup
??3@YAXPAX@Z
free
__p__commode

kernel32

GetTempPathA
GetModuleHandleA
GetModuleFileNameA
CreateFileA
SetFilePointer
CloseHandle
GetTempFileNameA
FreeLibrary
DeleteFileA
WriteFile
ReadFile
LoadLibraryA
GetProcAddress
GetStartupInfoA

user32

MessageBoxA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ