1703abdc44981f76ea13dcab4643d272_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1703abdc44981f76ea13dcab4643d272_JaffaCakes118
Size

16KB
MD5

1703abdc44981f76ea13dcab4643d272
SHA1

69acbae84094477f956e4c3eb77c6c7b174b0907
SHA256

3e95aad55349aa593a05d0e00251833a3d9b4a3036e4eac53ff67ceb256b84ba
SHA512

6bb045a41375a96e9e33efbc7c53df8ff4d305ded7a6f81b81f1e5dd0fa0184816753e4e43aa06fda682f1a4653bb7294e05a1d288759468ff98ab004fd9ad5d
SSDEEP

96:kp8SjcbcJjOgN3cpfcc5O3XwO0LFfJtOjS7IRdEDME0r1MxqNnDqExqEfhiPlPtn:682Scx3ca3UOjU1d6NNhiPlP1oyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1703abdc44981f76ea13dcab4643d272_JaffaCakes118

Files

1703abdc44981f76ea13dcab4643d272_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d126880ae1bdbaaf4dc4d07d9ad2b23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetFileTime
CreateFileA
SetFileTime
GetLocalTime
WritePrivateProfileStringA
GetSystemDirectoryA
SystemTimeToFileTime
GetSystemTime
WinExec
GetPrivateProfileIntA
GetStartupInfoA
GetModuleHandleA

user32

PeekMessageA
GetMessageA
DispatchMessageA
WaitMessage
LoadIconA
LoadCursorA
RegisterClassA
GetSystemMetrics
CreateWindowExA
GetWindowLongA
SetWindowLongA
SetWindowPos
SendMessageA
PostQuitMessage
DefWindowProcA
TranslateMessage

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_itoa
__getmainargs
_acmdln
exit
sprintf
isalpha
isalnum
_exit
_XcptFilter

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE