JaffaCakes118_be7f42f1d4defb40566384d21230adac | Triage

Sharing

General

Target

JaffaCakes118_be7f42f1d4defb40566384d21230adac
Size

480KB
MD5

be7f42f1d4defb40566384d21230adac
SHA1

3a39b2fc7edd99e596a64d059ac4e303b1d3a26a
SHA256

8d541bf6fc504063e35bbc09b31023f6d092b040997110a534c4da264fb14966
SHA512

9fd24e4c997aac62e3ff457443ea2ee5d71e74e03133ecdeab004d305e026bca4a55866b11192f2acbca656b96e1fe3951a08b15ea8f20237d337733f9b2c5e6
SSDEEP

12288:D/vbptVXjZ2+2AtH/45BFGDMsVGqubXVgzqSNi7cqv9k9Iszl:v5ZDp45BFSMsVGpV22h9k9Iszl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_be7f42f1d4defb40566384d21230adac

Files

JaffaCakes118_be7f42f1d4defb40566384d21230adac
.exe windows:4 windows x86 arch:x86

86632da30434ccfc050190a47fb559c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
exit
memcpy
memset
_itow
??2@YAPAXI@Z
_wcsdup
??3@YAXPAX@Z
free
__p__commode

kernel32

GetModuleHandleA
GetTempPathW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
SetFilePointer
CloseHandle
GetTempFileNameW
FreeLibrary
DeleteFileW
WriteFile
ReadFile
LoadLibraryW
GetProcAddress
GetStartupInfoA

user32

MessageBoxW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ