025d98595d26dd56780322422ce0ea78_JaffaCakes118 | Triage

Sharing

General

Target

025d98595d26dd56780322422ce0ea78_JaffaCakes118
Size

17KB
MD5

025d98595d26dd56780322422ce0ea78
SHA1

0945d3999a67ad27a3802ff877931bbeff668157
SHA256

0c63acf062cb5258c1996cba9d0ebe26987966c15cd38370879e724671074212
SHA512

27f5d1944e0ff56e1012a1d29e68885fb22e9e521e1573b3db5b120c7647f3816636836dbc9b09f9d040861f2854467e75380bb3b2bec193d1459da8f1e200fc
SSDEEP

384:bY919gDac29p9tk3HBmo0a791IO79QjX:cDDcYpLk3H/0Sj79QjX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
025d98595d26dd56780322422ce0ea78_JaffaCakes118

Files

025d98595d26dd56780322422ce0ea78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c48c16d42d38157bd57f5f75e0d75f4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetExitCodeThread
WaitForSingleObject
GetModuleFileNameA
GetProcAddress
LoadLibraryA
TerminateProcess
GetCurrentProcessId
Sleep
SleepEx
GetModuleHandleA
GetStartupInfoA

msvcrt

memcpy
strncpy
memset
strcmp
strcpy
calloc
malloc
_snprintf
strtok
strstr
_pctype
_isctype
__mb_cur_max
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strlen
free
_stricmp

Sections

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE