1c7f70d0f965de621365e8e05cdd1af4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c7f70d0f965de621365e8e05cdd1af4_JaffaCakes118
Size

20KB
MD5

1c7f70d0f965de621365e8e05cdd1af4
SHA1

1e6f4bdf58c21744f6743547771dfece4e86cc63
SHA256

e991fbe4e1bc802fa567aaec8f21a19103a5ff0d18b1eb9aa2c1c18bb5e30908
SHA512

d69441312d68cc5e01e54ccc902e300945ea4dd37a48533f877e1d2734b662ab273e67f2203a7567405c8987f6d6caf23f0d89b8a9ce648b7da6678329652a9e
SSDEEP

192:GmfU3wQ8QfyYssVAN2JqmkM3VsEVblW4LkjYP1oyPqQ9Z1:9U3bsIW44y1R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c7f70d0f965de621365e8e05cdd1af4_JaffaCakes118

Files

1c7f70d0f965de621365e8e05cdd1af4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97fca51c95a86328e962db57bf486e6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetModuleFileNameA
CreateProcessA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
GetModuleHandleA
GetStartupInfoA

msvcrt

sprintf
rand
srand
time
_except_handler3
atol
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_access
__CxxFrameHandler
_itoa

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ