f6bdd555c1e024d3aa8af90805b6ad03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6bdd555c1e024d3aa8af90805b6ad03_JaffaCakes118
Size

24KB
MD5

f6bdd555c1e024d3aa8af90805b6ad03
SHA1

3782210a4b49e83e3154fbb1e0bd87a61e3c254d
SHA256

c6e76cd7b034b44e4834c9a25074e38dfcd50dbd536f69af8400c57236ddc871
SHA512

a11eb6f3211901dbafcafe2b1076a91c5f6375774866f07471627e71cce8bacfab478b6c72ce35d1298cfc80154dc0d668ae6572ab3a488a24532271b9e06dda
SSDEEP

384:oxUk3DTQ5VSGNg07q1FkeNC6LLAj8SdzQnclEd5lbf1KF:6Uk3nsYGm07q1FkOC6LLAj8SdzmclE9s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6bdd555c1e024d3aa8af90805b6ad03_JaffaCakes118

Files

f6bdd555c1e024d3aa8af90805b6ad03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca03d289d32d25e96f17d4104bd05130

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleFileNameA
Sleep
GetModuleHandleA
GetStartupInfoA

user32

PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
CreateWindowExA
DefWindowProcA
ShowWindow

msvcrt

__CxxFrameHandler
_controlfp
_except_handler3
__set_app_type
fclose
fwrite
fopen
sprintf
rand
??3@YAXPAX@Z
__p__fmode
atol
srand
time
strchr
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE