1722b531312f9265dce3ba2e3d16cdfc_JaffaCakes118 | Triage

Sharing

General

Target

1722b531312f9265dce3ba2e3d16cdfc_JaffaCakes118
Size

20KB
MD5

1722b531312f9265dce3ba2e3d16cdfc
SHA1

0d9225b92a2f405373e17c8b48d35fc98755284e
SHA256

243880bf86a3c204da8f7ae0aa0d0278c06550f659219f891250ac8357249f85
SHA512

1b8e5833bfb0368a35bfd97c7de4a97a8735a7ca73e9339071ea0a672f0b04b7a02f99af4b5ced5eee2e4ab452c0c9c308e6fd08a94fb9ac307ccb9f2e0bbcef
SSDEEP

192:Gmrqmb05hKFN0u2kS9UpnnYENxrVFB8mcGP1oyPqQ9Z1:XrnYB9yH8rw1R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1722b531312f9265dce3ba2e3d16cdfc_JaffaCakes118

Files

1722b531312f9265dce3ba2e3d16cdfc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c0f88e8551ac74b0d99f9edd49b6c87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
CloseHandle
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetModuleFileNameA
CreateProcessA
Sleep
GetModuleHandleA
GetStartupInfoA

msvcrt

_except_handler3
??3@YAXPAX@Z
sprintf
rand
_access
time
__CxxFrameHandler
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
atol
srand
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ