JaffaCakes118_7c28b4f5e5ef9ce6f00e407a2ae79506 | Triage

Sharing

General

Target

JaffaCakes118_7c28b4f5e5ef9ce6f00e407a2ae79506
Size

488KB
MD5

7c28b4f5e5ef9ce6f00e407a2ae79506
SHA1

afb3f897a54886824832706342e4e490d8029ea4
SHA256

35f7e35cbc0454bb5fd0c1f0281286d1870fdfae1296d781e6334537ea13dd26
SHA512

142df43a2b84ae6620d721cf346a3bda476ac26ebb997404f0b0a61f4d59ca07dc452aa1b2331eb1bd8ea17cddfce54119a422da15615d298e9ce78369cc991f
SSDEEP

12288:lWPbHtkak9viyKYzIo94eMnAMMckn4jNdEnGm9ucQDH5f0Vp:kPK1xiKzIoDyMckoT25QT5f0f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7c28b4f5e5ef9ce6f00e407a2ae79506

Files

JaffaCakes118_7c28b4f5e5ef9ce6f00e407a2ae79506
.exe windows:4 windows x86 arch:x86

86632da30434ccfc050190a47fb559c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
exit
memcpy
memset
_itow
??2@YAPAXI@Z
_wcsdup
??3@YAXPAX@Z
free
__p__commode

kernel32

GetModuleHandleA
GetTempPathW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
SetFilePointer
CloseHandle
GetTempFileNameW
FreeLibrary
DeleteFileW
WriteFile
ReadFile
LoadLibraryW
GetProcAddress
GetStartupInfoA

user32

MessageBoxW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ