3d49f6f11d2e9cd094a089a15748db89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d49f6f11d2e9cd094a089a15748db89_JaffaCakes118
Size

24KB
MD5

3d49f6f11d2e9cd094a089a15748db89
SHA1

e6d16375d2f310bc4bd0d2277bc458a1bd97602c
SHA256

22d612978dcd767428566f0e5fd82fb9c5be9e5c2eb48c03e8ce87bc736685ec
SHA512

63f457f37a00b5e8447a31ad36135fda675c6d2c71e4146f8cd85d158539e80ce4eda62ea5e871d95d32872267d4aed50770f52fe3bd5cbf02c71a4178cbbd82
SSDEEP

384:NdlykaWyzODfRYxI5g1IurWkWV4Nc0AbjN9tu3h1hnNB6J:NdlykaWyzODfuxI5g1LikWV4+0AnNruc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d49f6f11d2e9cd094a089a15748db89_JaffaCakes118

Files

3d49f6f11d2e9cd094a089a15748db89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7413bea38d9754e9d308cfb30d00a827

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CloseHandle
CreateProcessA
Sleep
GetProcAddress
LoadLibraryA
FreeLibrary
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetModuleHandleA
GetStartupInfoA

msvcrt

div
ceil
ldiv
isxdigit
isupper
isspace
ispunct
isprint
islower
isgraph
isalnum
sprintf
rand
srand
time
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
_access
atol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
isalpha
isdigit
_itoa

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ