JaffaCakes118_3463cee1547a94d1b1cb953907ff986c | Triage

Sharing

General

Target

JaffaCakes118_3463cee1547a94d1b1cb953907ff986c
Size

5.3MB
MD5

3463cee1547a94d1b1cb953907ff986c
SHA1

357e395eeffe902743d6bdfcd54ebd4989ca60c3
SHA256

00fd3ebe05097e9d7126bb0c341b45b7df3233c37d00350bb5da5de07caeebed
SHA512

744f61ee3f85a1ae453a6cf0eb315eb44cb10ad16b411bd59c16bfbccd5b509aca37ff7e2eb38b4076ec3ba78df031cb1add05ec127bfe834f625e2baf3cac42
SSDEEP

98304:802MvuPcO8xoklmbET3aKE9cWdaMfoB5TF6i:801mPcOUpkEuZfQRB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3463cee1547a94d1b1cb953907ff986c

Files

JaffaCakes118_3463cee1547a94d1b1cb953907ff986c
.exe windows:4 windows x86 arch:x86

009023b6b22e202aa54365d2270f6f95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeResource
CloseHandle
WriteFile
CreateFileA
MoveFileExA
GetTempFileNameA
GetTempPathA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
GetStartupInfoA

shell32

ShellExecuteA

msvcrt

sprintf
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter

Sections

.text
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 822B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ