14728add004e15ab248bab9180f54ee3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14728add004e15ab248bab9180f54ee3_JaffaCakes118
Size

47KB
MD5

14728add004e15ab248bab9180f54ee3
SHA1

fcdd328b1f89dfc0c9da9a53bc1a2ff1fc7fde13
SHA256

1924e3a6a0838837d73af49e87d7c96e90154ab81703e1f463b0d14792a0b004
SHA512

a7912804fbac083777b52fe6fc4ea3218a63f99cb4f3596662efcb293e88a11992e10ff7d573995cbacb7b08a9362304b49e11a824acdbf173d930336d0e1994
SSDEEP

768:7EDUsUNzG5wBKzvmMWouSvZJGfM0FjO2ncPms9:7E4N9UwBbMWouSvF0FjO2M9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14728add004e15ab248bab9180f54ee3_JaffaCakes118

Files

14728add004e15ab248bab9180f54ee3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd9898ed36fb25a28952f11203d05795

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
OpenMutexA
CreateProcessA
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
GetStartupInfoA

user32

CreateWindowExA

msvcrt

_exit
memcpy
rand
strcpy
malloc
strlen
tan
cos
sin
memset
srand
time
_onexit
atol
printf
free
_ftol
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE