248551f85e7101ccd42cb700de4fb561_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

248551f85e7101ccd42cb700de4fb561_JaffaCakes118
Size

91KB
MD5

248551f85e7101ccd42cb700de4fb561
SHA1

0f435c951cc7a1992b94c5e920e928c6bbbad38b
SHA256

5bbc586c27c0436844d21cf64eefc09413bafc9933103b8d02f3a3168facd80a
SHA512

4b90bd6ac1de4e6debd231f8ac9734d7eeb11f8163d8db1a4fa6c2c32ea55a0aff63d2e22d719f58c886445251ae7bd3e2b95ce21f46b57cc96b8a5a7b4bdcca
SSDEEP

1536:Oi4Z7x6wdt4jB1s1e65BlvpNgT+qfD1PrBiz9qVslM3arWJEzIlo6pnNH:OnJiw9vpNZqfxrjIM3aqJEzwoKn5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
248551f85e7101ccd42cb700de4fb561_JaffaCakes118

Files

248551f85e7101ccd42cb700de4fb561_JaffaCakes118
.exe windows:4 windows x86 arch:x86

692b781092762681c1265eafd4884bbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

free
rand
srand
time
_close
_lseek
??2@YAPAXI@Z
fclose
fputc
fgetc
fread
fseek
fopen
_exit
_read
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strncpy
sprintf
_open
_write
_XcptFilter
malloc

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
GetStartupInfoA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ