ec30fc39417d26682c41fe21f6fdb022_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec30fc39417d26682c41fe21f6fdb022_JaffaCakes118
Size

26KB
MD5

ec30fc39417d26682c41fe21f6fdb022
SHA1

199b5a1b866adb584e34b5b9d8ce8b973e9a89ed
SHA256

c37ea6b27e35b3496a49d830be94dc62dad29b7f4f5dee4a2cc78c4fd63820c5
SHA512

94d7b0d795c083685621e1b085f5dea6115cd610da8d23eb26b71e74e16012c9138eab80b18d7c3c1d6d3360dd04f83ddb9a53d4e2dca5533dd0fb2a7afe620c
SSDEEP

768:1s5c1p5+9KmhWT3Kf3pAmH5Fr86No+SOmSbYbdgfLsXzrjuizar20sLpr3zaWtwk:1GrAaOUfG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec30fc39417d26682c41fe21f6fdb022_JaffaCakes118

Files

ec30fc39417d26682c41fe21f6fdb022_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4cb9f934245299d15cc798b57b810cc5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

atoi
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
srand
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strncpy
strtok
_cexit
_snprintf
??1type_info@@UAE@XZ
_CxxThrowException
strstr
strchr
??_V@YAXPAX@Z
__CxxFrameHandler
memcpy
strcat
sprintf
rand
strcmp
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
??_U@YAPAXI@Z
strcpy
_vsnprintf
strlen
exit
_except_handler3
?terminate@@YAXXZ

kernel32

GetTempPathA
lstrcmpiA
GetModuleHandleA
ExpandEnvironmentStringsA
WaitForSingleObject
GetLastError
ExitThread
Sleep
GetTickCount
GetProcAddress
LoadLibraryA
GetStartupInfoA
LocalFree

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE