JaffaCakes118_211f876da3a190489d2dacb5a7f1c7a7 | Triage

Sharing

General

Target

JaffaCakes118_211f876da3a190489d2dacb5a7f1c7a7
Size

513KB
MD5

211f876da3a190489d2dacb5a7f1c7a7
SHA1

a20cc0ee9111a4ab2f80cee2760a448e1efab4d2
SHA256

8673eb94afea8536d8de8b1347a01c0bd235227f184aa3b0f135a65c3d805602
SHA512

92750c01e110363f5a9d1dab8b06d17dd990749f3da89e938b77c24eac83ff4f6fdaf805aa3bdd08d6dfa0689d94312136dffcffc4bb6c2b95ece5d4b30320c5
SSDEEP

12288:/decm1pgVVmLjb+NaeIbhAOib4r6hV+ufBeZZHsZC:w5g3mLv+NaeuSb42nFfBeZZHGC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_211f876da3a190489d2dacb5a7f1c7a7

Files

JaffaCakes118_211f876da3a190489d2dacb5a7f1c7a7
.exe windows:4 windows x86 arch:x86

c06456c919add16c1d5d3cbe34c37815

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
_initterm
__set_app_type
_except_handler3
_controlfp
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
exit
memcpy
??2@YAPAXI@Z
_wcsdup
??3@YAXPAX@Z
free
__p__fmode

kernel32

GetModuleHandleA
GetTempPathW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
SetFilePointer
CloseHandle
GetTempFileNameW
FreeLibrary
DeleteFileW
WriteFile
ReadFile
LoadLibraryW
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ