0cd2731b0b001953107e17ac7293e454_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cd2731b0b001953107e17ac7293e454_JaffaCakes118
Size

180KB
MD5

0cd2731b0b001953107e17ac7293e454
SHA1

7a2f303908206b844e07c515bbb48ec731ac23ed
SHA256

8ab2ccf056144e5497dbcd22933c84b32a15e4f61d6836089c2c7533c3883fa4
SHA512

790c966be077cb3cf02d5a1605d20b418fba285b8eb597f9ebe7f3bcaba714b4774988151f9ade7489d031d17fb7d56016b13fd6a415bccb457c9a5dbe31ff5d
SSDEEP

3072:Qs+oR5/hm59WDf6k9NK+Vj+IgXRlg4xnXVAMY6LyQyPB:Qs+EhG9LCA+VPgB26VAILKJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cd2731b0b001953107e17ac7293e454_JaffaCakes118

Files

0cd2731b0b001953107e17ac7293e454_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94f7e8d17ebcda687fddac6b903a66da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

rand
srand
time
printf
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
atol
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
memset
strlen
malloc
_initterm
strcpy

kernel32

GetModuleHandleA
CreateProcessA
lstrcmpA
GetStartupInfoA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ