0e2d5cee2aa971a23a02b1b716fa8a33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e2d5cee2aa971a23a02b1b716fa8a33_JaffaCakes118
Size

192KB
MD5

0e2d5cee2aa971a23a02b1b716fa8a33
SHA1

1d5e68007ddf539a2b6577dba009085129316ce2
SHA256

4643735f5897612826d9282f488878b8141799da0ff9824f61a64210200d2e0e
SHA512

cf8737d356daf1f36ccc7e5a0d4e17b6f8a406f0876d2b863df2f37184237be52f8b6473f5bd0d20036c44d8d6c7225bbc5a6f6cc1dfc03e7a793a3f72cba2e5
SSDEEP

3072:LoK5MZs8ji04Cm0krtLFF+XkMGO1+eY1reurQU:Qsqx4L0krJFF+Xj1+DsuT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e2d5cee2aa971a23a02b1b716fa8a33_JaffaCakes118

Files

0e2d5cee2aa971a23a02b1b716fa8a33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97bee415100fdb5049cc25ddab40b399

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
OpenMutexA
CreateProcessA
GetProcAddress
GetModuleHandleA
lstrcmpA
GetStartupInfoA

user32

CreateWindowExA

msvcrt

exit
memcpy
rand
strcpy
malloc
strlen
memset
srand
time
atol
free
_exit
_XcptFilter
printf
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 834B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ