255b381170d2214c23143db9d9d701fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

255b381170d2214c23143db9d9d701fb_JaffaCakes118
Size

88KB
MD5

255b381170d2214c23143db9d9d701fb
SHA1

39891e48e3a2ed0039a4a8cd61c435dc220a663f
SHA256

05cd2378bebd7a007beedce3723c1c4f1ab6a439d09ddd0f77867bf06f76082d
SHA512

4cb6a51a16a5ba5e10fc7332c40e2e2b62907e79cfdb46a6f4fc59d630de27b9a3fb32548e935bdb8ab67ec7b0778e68966ee46fa42e3b06d06454edaf1a9703
SSDEEP

1536:JBF+NgKUau/agJ97lwGAGXB326cg/kCBqr0frbzAQT2THxWtS:HHt/1J5KGx2Kc4PzL2kS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
255b381170d2214c23143db9d9d701fb_JaffaCakes118

Files

255b381170d2214c23143db9d9d701fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e016c7d1d200f6b30094109560338b9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
strtok
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
atoi
free
memset
sprintf
malloc
memcpy
strlen
srand
rand
strstr
fopen
fclose
__setusermatherr
strcmp

ws2_32

send

kernel32

SetErrorMode
GetCommandLineW
GetTickCount
Sleep
GetProcAddress
GetModuleHandleA
OutputDebugStringA
GetStartupInfoA
GetModuleFileNameW

user32

MessageBoxA

shell32

SHGetFileInfoA

ole32

CoInitialize
CoCreateInstance

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE