JaffaCakes118_839da67a9f654982617d092823062d98 | Triage

Sharing

General

Target

JaffaCakes118_839da67a9f654982617d092823062d98
Size

3.8MB
MD5

839da67a9f654982617d092823062d98
SHA1

930ec9d2ad19b22531cb30174cfb356230211d02
SHA256

8ce0f5a4817ac353db8c9c559bc80f67c4b4383f005eb25e053feba9cce1fd84
SHA512

c7c770dc30da9975cb97257c86e732ca694048dcb771bf92d272f0201079c64b13b61948bfef8b22cf47b5f4beed2f96194d7e8f38ee7c937631420048bf6e0f
SSDEEP

98304:7ydA3JRlWA66I3KogwNldX33xQK7xfk6JN6axe63dfjyHJi+kf0:7yqZn7ogwNlVRxVRrCJb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_839da67a9f654982617d092823062d98

Files

JaffaCakes118_839da67a9f654982617d092823062d98
.exe windows:4 windows x86 arch:x86

c06456c919add16c1d5d3cbe34c37815

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
_initterm
__set_app_type
_except_handler3
_controlfp
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
exit
memcpy
??2@YAPAXI@Z
_wcsdup
??3@YAXPAX@Z
free
__p__fmode

kernel32

GetModuleHandleA
GetTempPathW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
SetFilePointer
CloseHandle
GetTempFileNameW
FreeLibrary
DeleteFileW
WriteFile
ReadFile
LoadLibraryW
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ