0e37dd87eb6af3c646511eca8bcafe6f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e37dd87eb6af3c646511eca8bcafe6f_JaffaCakes118
Size

20KB
MD5

0e37dd87eb6af3c646511eca8bcafe6f
SHA1

ee2cbb93eda3a24b6c367be8846a1f204d28e7eb
SHA256

463244950a374c18247da9104b33e6411ce9781141c9a8119ddc64be130a972a
SHA512

73d62d0b3e68c887e9ef914acc45fe0163bc94b486a49dba3cc34f99ef3239359438d24928431802ade9a056f754547961b9854ec458cbc5a78a63f940d252dc
SSDEEP

384:xySCOB9gd4WwaRPh5bUtxlRKdfAhoL1R:xcOr9W5RJ5YtncJAhQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e37dd87eb6af3c646511eca8bcafe6f_JaffaCakes118

Files

0e37dd87eb6af3c646511eca8bcafe6f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4fda499e21b3ec0e6f1c0a4b0f3edc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CloseHandle
CreateProcessA
FreeLibrary
MoveFileA
DeleteFileA
WriteFile
CreateFileA
Sleep
GetModuleHandleA
GetStartupInfoA

msvcrt

isprint
islower
isgraph
isdigit
isalpha
isalnum
div
ceil
ispunct
rand
srand
time
__CxxFrameHandler
??3@YAXPAX@Z
_access
_except_handler3
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
atol
sprintf
_itoa

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ