10136476aec80f45e811192e7be1ce19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10136476aec80f45e811192e7be1ce19_JaffaCakes118
Size

117KB
MD5

10136476aec80f45e811192e7be1ce19
SHA1

3c578d2b1786366e1b1bc67dedc2a0c2e16692cb
SHA256

74ca2e104b5c0e81f9a206d995f80403477813ccf3ea176569cb8416eb66f086
SHA512

2ed670594c2b672599dc94145f8dbeb3d07c5072c553fc08c507472644073bf535b8df1be8e0ed38ca407ad6a88070c5e85d0d831c0b9f31df5ecbfad54cef96
SSDEEP

3072:xx70FUXPDPTWhmGKLAOEFNl0bXAYc+/vJkRCdQ:777XPDLLEvPjYc+/vJgt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10136476aec80f45e811192e7be1ce19_JaffaCakes118

Files

10136476aec80f45e811192e7be1ce19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b251e27b518d286183a4f0c6d131cc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
LoadLibraryA
GetProcAddress
lstrcatA
lstrcpyA
CreateProcessA
Sleep
GetVolumeInformationA
GetTempFileNameA
GetTickCount
GetModuleFileNameA
GetTempPathA
ExitProcess
CreateThread
GetLastError
CreateFileMappingA
SetErrorMode
DeleteFileA
GetModuleHandleA
GetStartupInfoA

msvcrt

toupper
strstr
malloc
_except_handler3
fclose
ftell
fseek
fopen
fwrite
atoi
fread
memset
strlen
strcat
strcpy
rand
strrchr
strcmp
strtok
srand
__p___argv
__p___argc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
fputs
_strdup
_strcmpi

Sections

.bss
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE