0f96f7fb12ae00ba9cdcf74a8b44455b_JaffaCakes118 | Triage

Sharing

General

Target

0f96f7fb12ae00ba9cdcf74a8b44455b_JaffaCakes118
Size

226KB
MD5

0f96f7fb12ae00ba9cdcf74a8b44455b
SHA1

d6cd60de717b8e3bb280933a357ff8ddc9e367f2
SHA256

26203706cba58a2652434375528a145994353a918a80d90066e2071785c8a5ec
SHA512

a8eab1ad1433c79bf71465d15d4cdcd212ce00234afa3cc3469a13072ea95b3bac79f1560876875b1c72fb0d552dc78acd8103c3363348445e13c9d05aeb5df3
SSDEEP

3072:ta9pVd66uFW3P4a+qsv2lN+byKM3t6VP4oqB1ePKdU3DH89wBmo:ta9pVTbR+fv2l0brM6B/qB1ePKAvl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f96f7fb12ae00ba9cdcf74a8b44455b_JaffaCakes118

Files

0f96f7fb12ae00ba9cdcf74a8b44455b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

168875c15986415e8d21c916e114242b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetTickCount
lstrlenA
lstrcatA
LoadLibraryA
GetProcAddress
Sleep
FreeLibrary
GetModuleHandleA
GetStartupInfoA

msvcrt

??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
rename
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
_CxxThrowException
_mkdir

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ