15eb3dd9da873f0e37289d1f3c73199c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15eb3dd9da873f0e37289d1f3c73199c_JaffaCakes118
Size

16KB
MD5

15eb3dd9da873f0e37289d1f3c73199c
SHA1

48347f48f49de0f6e7c311e42ff1ac16969e8e74
SHA256

9303d50a77a713fa5f4dc8677f8e75de805cde38d91a2dfd40f0dc5c6dd5f2f4
SHA512

60fede7ae6084f6bfb84bc07291f6cf35b128ecad88199aa1c46966520f42bb50bd2de1a6737efd44190dcf5e8e031e4db968e705170fa46cab1da6e5e103183
SSDEEP

96:iGJYyoNh67auAORdmMkdJnwLwbzJF/PjSomyeahiPih0Ptboyn9:SyoNhAA7dJx7PjefahiPG0P1oyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15eb3dd9da873f0e37289d1f3c73199c_JaffaCakes118

Files

15eb3dd9da873f0e37289d1f3c73199c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

970e1ef9d7f268ac657131a2cca0adbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
GetSystemDirectoryA
GetLocalTime
CloseHandle
GetFileTime
CreateFileA
SetFileTime
GetPrivateProfileIntA
SystemTimeToFileTime
GetSystemTime
WinExec
GetStartupInfoA
GetModuleHandleA

user32

LoadCursorA
RegisterClassA
GetSystemMetrics
CreateWindowExA
GetWindowLongA
SetWindowLongA
SetWindowPos
SendMessageA
PostQuitMessage
DefWindowProcA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
WaitMessage
LoadIconA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_itoa
exit
ldiv
sprintf
isxdigit
isupper
ispunct
isspace
_exit
_XcptFilter

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE