JaffaCakes118_8a357461a77deec8407c5128d0a92a75 | Triage

Sharing

General

Target

JaffaCakes118_8a357461a77deec8407c5128d0a92a75
Size

1.5MB
MD5

8a357461a77deec8407c5128d0a92a75
SHA1

187c9875637849f4742feab5d0810146402b6f4a
SHA256

a8deb7b2ee86f8afc6dba0071c10d512145fb5d276c0e0188bb32338b047a33f
SHA512

e4348c621171d1bf43466dee69766017bccb66efddadf011b5ff497af801ff0660d2ee29aeed2cd76c7a900450fbdc1eb3c9a4c73e88e4d1b03ec0335020f235
SSDEEP

24576:IvgGV005SUW+WyB6oz+egVvJBabrSYFvXA14pSnzk/R5xya7oB:I7V0097CeOYFvwuIzk/RnyaC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_8a357461a77deec8407c5128d0a92a75

Files

JaffaCakes118_8a357461a77deec8407c5128d0a92a75
.exe windows:4 windows x86 arch:x86

9e38c7bedf9845ef75a4d21de95dede2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleFileNameA
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
GetProcAddress
GetFileSize
GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetShortPathNameA
GetModuleHandleA
Sleep
GetTickCount
GetCurrentDirectoryA
FreeLibrary
GetStartupInfoA

advapi32

GetUserNameA

shell32

ShellExecuteA

msvcrt

__getmainargs
??3@YAXPAX@Z
exit
atoi
??2@YAPAXI@Z
strtok
_except_handler3
strstr
_exit
_XcptFilter
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ