290d713fab258f1a7615e5b1d1703152_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

290d713fab258f1a7615e5b1d1703152_JaffaCakes118
Size

24KB
MD5

290d713fab258f1a7615e5b1d1703152
SHA1

536743e5e22c1b14db6032f04c076a32ab1eec02
SHA256

3d414798b57471c802ceaa22f63313ffc1d72d2010c3ddaa7cfa9c226f71fbc7
SHA512

a50d401bbdb25aea73f62292744358ab167d147de95ffcceaf96ec53a53cebf95a2ef7b4046c28f893056dea5327bbb79bfe1910b330b65f53255e8771a0f05a
SSDEEP

192:DAyN1rAc/ypItly0B8A860lJ/FmjXkuXbkjzP1oyCKchd3/KKQ9Z1:DA21Ac/yp6868AmYg8o310nhdvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
290d713fab258f1a7615e5b1d1703152_JaffaCakes118

Files

290d713fab258f1a7615e5b1d1703152_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72ce60e75596b3aee14725e331a1b1bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
CreateProcessA
FreeLibrary
GetLongPathNameA
GetTempPathA
WriteFile
CreateFileA
GetModuleHandleA
GetStartupInfoA

msvcrt

isxdigit
isupper
isspace
ispunct
isprint
islower
isgraph
isdigit
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
ldiv
rand
srand
time
__CxxFrameHandler
atol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
printf
sprintf
_itoa

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ