282d76b96e32ab75d05b7cfa10ffbc20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

282d76b96e32ab75d05b7cfa10ffbc20_JaffaCakes118
Size

140KB
MD5

282d76b96e32ab75d05b7cfa10ffbc20
SHA1

61c262a2379b6aa4bd223fdb07d611c6e20a0f3d
SHA256

0d3be15a69987121a2b9648f0aa62655d485b458b7a3df3d2bbc90cdf2a6eca4
SHA512

1cdf10da734c4f5d8f2b436c3c7645019e25fbf7c7e7c33e78dc2ae6de5f9774725a6d318336736a5b87e25d837e60d477342618a5e5554cbec69dcbc208498c
SSDEEP

3072:SU/naqte4ZAyrHlbxz11gtRh6M+Gf10DieZg2ARyEvOLUgV:b/naqtUyr/vSN+G9JeZWFA9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
282d76b96e32ab75d05b7cfa10ffbc20_JaffaCakes118

Files

282d76b96e32ab75d05b7cfa10ffbc20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2dfe5df16944f80ab8ced318ff1b919f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
CopyFileA
lstrlenA
GetLocalTime
FindResourceA
GetTickCount
GetModuleFileNameA
CreateThread
Sleep
ReleaseMutex
GetCommandLineA
GetProcessHeap
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA

msvcrt

_except_handler3
realloc
malloc
strstr
strncat
strcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strchr
memcpy
??3@YAXPAX@Z
strlen
??2@YAPAXI@Z
memset
strcat
_strnicmp

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ