305cedec9839edeb91cfd0f4c7797e8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

305cedec9839edeb91cfd0f4c7797e8a_JaffaCakes118
Size

217KB
MD5

305cedec9839edeb91cfd0f4c7797e8a
SHA1

ee811ded4b5c506acad1d59d24eb71b670f7a002
SHA256

7bf0be0ea13e5ad24d69f1d7035a38dda94b17d42942cbb197fbc4c1f21abfd6
SHA512

53446255af0e5e2a586a7168ab489332e9337670f6a102b8bcde2a1fb409a95dfe0ba442f925b25ef33622822fb2a52ee8025031284e8a1d5ff67b329398b7a1
SSDEEP

3072:3CMWnY3UUl2+2ySRf5HfUXcI1FlAUkTWUon7sZPwl9JG3mr:3CMWnGhp23tRtIpFkiX7sZPwF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
305cedec9839edeb91cfd0f4c7797e8a_JaffaCakes118

Files

305cedec9839edeb91cfd0f4c7797e8a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

175cdb4c2dcc72fd3f02e0d7b1d8d165

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetTickCount
lstrlenA
lstrcatA
LoadLibraryA
GetProcAddress
Sleep
FreeLibrary
GetModuleHandleA
GetStartupInfoA

msvcrt

??2@YAPAXI@Z
__CxxFrameHandler
strstr
??3@YAXPAX@Z
rename
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
_CxxThrowException
_mkdir

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ