ead962cb0e4ba686356379249d16977d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ead962cb0e4ba686356379249d16977d_JaffaCakes118
Size

38KB
MD5

ead962cb0e4ba686356379249d16977d
SHA1

f1eb33d0a6f32685e47928784462871b36d2f545
SHA256

67b29237710359ebd2b884182c4111e3e2920c16b7d1aab8ec29cff824566545
SHA512

7aa2b871410a3edb0d49e42c533fab0184b7c211257517634344369b8e61d79d776c5c1d573902997393dfff3e495f9241e2bf991fbac55503d9e8378a56a81a
SSDEEP

768:SNEOsV8o/TjrJ09ZYXFMw6wjpCFJ2KVGk1sFZoVk1nv:OEOq/TPJfJIG4GknG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ead962cb0e4ba686356379249d16977d_JaffaCakes118

Files

ead962cb0e4ba686356379249d16977d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1033a7fdfb0246789310256ddf168324

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
Process32Next
Sleep
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
lstrcpyA
GetWindowsDirectoryA
ExitProcess
SetFilePointer
CreateFileA
FindFirstFileA
GetModuleFileNameA
SetFileAttributesA
DeleteFileA
GetCurrentDirectoryA
CreateThread
WritePrivateProfileStringA
GetPrivateProfileIntA

msvcrt

strlen
memcpy
memcmp
malloc
rename
sprintf
strchr
free
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ