078ac92ff434b7ffad97227ea7342926_JaffaCakes118 | Triage

Sharing

General

Target

078ac92ff434b7ffad97227ea7342926_JaffaCakes118
Size

27KB
MD5

078ac92ff434b7ffad97227ea7342926
SHA1

5aeac019ba9010d4ce13166e9a84f1d14c6d3efd
SHA256

99f5bb03e9be3e347a56ae1a4689d008e937ebdd5b1be1b635b7b935fbc8a5ee
SHA512

5463c63b292d953b7760509c635af561a37c5bced5a313d977ad059936dee29cbca26af222420de5ee10729dcd6f6f5f0f5536dc487559a1a0628842a34a193c
SSDEEP

384:DAXQAAE2ESHR5lov1TgEwnB2RDf+bIwJ4fCAuFkJb+cmj7QD562IW/SC:cgAAE2ESxyTNwnB2RLOrJ4Oq8x7S/SC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
078ac92ff434b7ffad97227ea7342926_JaffaCakes118

Files

078ac92ff434b7ffad97227ea7342926_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7caf0fc7def5d205f3b185ac75a1ab28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
atoi
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcpy
srand
rand
printf
free
memset
sprintf
malloc
_snprintf
memcpy
strlen
fopen
fclose
strcmp
_adjust_fdiv
strstr

kernel32

SetErrorMode
GetModuleFileNameW
GetCommandLineW
TerminateProcess
GetTickCount
FindResourceA
SizeofResource
LoadResource
LockResource
Sleep
GetModuleHandleA
GetProcAddress
GetStartupInfoA

ws2_32

send

user32

MessageBoxA

shell32

SHGetFileInfoA

ole32

CoCreateInstance
CoInitialize

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ