314e7bc3d43bfb2a134ce70fe1e9720d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

314e7bc3d43bfb2a134ce70fe1e9720d_JaffaCakes118
Size

32KB
MD5

314e7bc3d43bfb2a134ce70fe1e9720d
SHA1

e43b6e0a9514ac28bab748a6c2684e03f7297739
SHA256

94fd888085d3d27f35914df7fe2171082aaee011a60044af9d30906931e71e59
SHA512

28a7bf9374e15cd8f7caf78560aa41c081315444a0bc02842b90714204107939daa00b9e12c1da9a3eb2d655aa6dfc1c8b93a1418d7e4af1d513c5ac649976b7
SSDEEP

768:71ljyy17sesDB9fB79qzlgqZXjaty50RV1ywaf3wH:71Bb17sfB9fBBq9XeF23wH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
314e7bc3d43bfb2a134ce70fe1e9720d_JaffaCakes118

Files

314e7bc3d43bfb2a134ce70fe1e9720d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c57f3fd96ecfc1bc3962f18bc9679f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
CreateThread
GetStartupInfoA

msvcrt

memset
strcpy
_exit
_XcptFilter
exit
_except_handler3
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_acmdln

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ