15f2b00392b6f03d5edce35305e64cc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15f2b00392b6f03d5edce35305e64cc5_JaffaCakes118
Size

9KB
MD5

15f2b00392b6f03d5edce35305e64cc5
SHA1

7e6c7d146598df7ab53c3a3b325730b649a9e6e7
SHA256

16efd909ed255628ad4da000cb7a2d1efda45ba3c549cb6c89017f92ffe3661f
SHA512

f10465c46bc9d8a6d26ca8a64c6490f9088b8c7c05a1670c58c6938c874e76fcfa8ba3e66d5f855126c295e01d211d7cea8579bb72aaa2171c1b662b2a5607e8
SSDEEP

192:lz6jOv9bIXLbjk13Jq+RpkDzCXFRGXRX5CIpP1oynilv:lz6jO10XLn43VpMzC1R2X5CI11k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15f2b00392b6f03d5edce35305e64cc5_JaffaCakes118

Files

15f2b00392b6f03d5edce35305e64cc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8c5421fe25a7772f80bd46e7aeb250d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
FreeLibrary
GetModuleFileNameA
GetTempPathA
GetStartupInfoA
GetModuleHandleA
DeleteFileA
LoadLibraryA
GetComputerNameA
GetProcAddress

user32

LoadStringA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
strchr
strstr
strrchr
free
fclose
fflush
fwrite
fopen
malloc
srand
time
ftell
fread
fseek
atoi
strncpy
sprintf
rand
strncat
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_stricmp

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ