19cf8b5c67f96fbbc5480c144c99e9f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19cf8b5c67f96fbbc5480c144c99e9f1_JaffaCakes118
Size

24KB
MD5

19cf8b5c67f96fbbc5480c144c99e9f1
SHA1

454d1902c5982507e7fb1312a48948fafa80fa92
SHA256

daea0d77c49ce774289a3a85d68d030a6ac3d2a1357c9f11d857bb0fa9e544e0
SHA512

6f70391e09842f6d9796c2847e33eed200f054a21b1178f4da839650626df7739d10304cd8a3ea37ac3bd6c13e0c3a46f8ccc331a0e6850c5d4fc91946f1757e
SSDEEP

192:x+cdhzckx6M3snA3QI1SYxMMra8qWcvrP1oyuyuMuatFoHqkGKQ9Z1:x+CzckcM3IYQASBT8Rcr14MuatFoKkG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19cf8b5c67f96fbbc5480c144c99e9f1_JaffaCakes118

Files

19cf8b5c67f96fbbc5480c144c99e9f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e159dffc2cbcc5de094c96e4c44fb7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleFileNameA
CloseHandle
CreateProcessA
GetProcAddress
LoadLibraryA
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
FreeLibrary
GetModuleHandleA
GetStartupInfoA

msvcrt

??2@YAPAXI@Z
_except_handler3
rand
sprintf
strstr
time
__CxxFrameHandler
_access
atol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
srand
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ