191218853c69323624de2b5a1075cafc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

191218853c69323624de2b5a1075cafc_JaffaCakes118
Size

212KB
MD5

191218853c69323624de2b5a1075cafc
SHA1

a74657a3fd5e3109e86d9e38ac70697427c24c28
SHA256

80c35b764629f4d852b2cedc6b008484369d620ff533b53cfe847c2e4b202d69
SHA512

802966c18a4570b97bea78ad41f606ac7fb98beb826b4671657e88f8193dcb09bacff793af6bd65570364c7aee59370f26b3ff3fee7714f08da6bf52e3b5f1f1
SSDEEP

1536:vMbdoSGwIRAdLfyHn/Q3yT5FXoNs/fpkoAQtseRxds4aSukUEVVCr3F4PiGKNcTa:6DIafuQ0rxvtrnd7uSVui6GKNcTW3R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
191218853c69323624de2b5a1075cafc_JaffaCakes118

Files

191218853c69323624de2b5a1075cafc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac7b8e661d01b614a115132412570366

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

memset

msvcrt

strtok
srand
rand

kernel32

FreeLibrary
lstrcpyA
GetTickCount
CreateFileA
FindFirstFileA
GetWindowsDirectoryA
GetProcAddress
WriteFile
VirtualAlloc
FindNextFileA
GetSystemDirectoryA
FindClose
lstrlenA
lstrcatA
LoadLibraryA
ExitProcess
GetSystemTime
CloseHandle
HeapCreate
GetLastError
HeapSetInformation
GetVersionExA
LocalAlloc
InterlockedExchange
RaiseException

user32

GetForegroundWindow

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE