354f258f14ab15d638c8ede56c116f91_JaffaCakes118 | Triage

Sharing

General

Target

354f258f14ab15d638c8ede56c116f91_JaffaCakes118
Size

24KB
MD5

354f258f14ab15d638c8ede56c116f91
SHA1

2be16ddec3e0468f9b88ca9c6cc21046294fee15
SHA256

dea9e76886ce54698f4c5556d99a9f3d96a3b681a0d4e38522a92b09dae5528b
SHA512

b397640a6e2d2e64d68444767507b12fc0192b73850412165c502eb2f393e194e3ee44820f0af1a80da54f9932ebdec2aeaedef16e256a048bdf7ab8f9e1a4fd
SSDEEP

384:xCRvrKc0WHIrerpFvGOT9K6OLPO4GuD1Xl:xCRvmc0caerpFvGOT9ROLPO4Gup

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
354f258f14ab15d638c8ede56c116f91_JaffaCakes118

Files

354f258f14ab15d638c8ede56c116f91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61eea8ef4f0fa6bbdfccb545652d8d59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetModuleFileNameA
CloseHandle
CreateProcessA
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
Sleep
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetModuleHandleA
GetStartupInfoA

msvcrt

isupper
isspace
ispunct
isprint
islower
isgraph
isdigit
sprintf
isalpha
isalnum
div
isxdigit
rand
srand
time
__CxxFrameHandler
??3@YAXPAX@Z
strstr
??2@YAPAXI@Z
_access
_except_handler3
atol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
ldiv
ceil
_itoa

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ