40094097401b9114f48c8e7126c5eb86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40094097401b9114f48c8e7126c5eb86_JaffaCakes118
Size

17KB
MD5

40094097401b9114f48c8e7126c5eb86
SHA1

9017580df87e48cd6ba59d64a5d288651c92744a
SHA256

0bfe1d0b0280c920a934f4fb54fa9037b5bb5f0f8a4f99c96128f3fb696e7cc3
SHA512

d1e8bff68c4247862bd7139b10460c5791977193bb2dbae7c0f65088688f104cd109868b59cfa0b8041750af118262d2a03ca393168a3aa23468d1b043a04a83
SSDEEP

192:GQ7XTPzRyDpls9cwtuyyYEmh84kP1oyY1M:RTPzvDjh8R1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40094097401b9114f48c8e7126c5eb86_JaffaCakes118

Files

40094097401b9114f48c8e7126c5eb86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c95db9a35b96d66a40076e51b1aa42b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CloseHandle
CreateProcessA
FreeLibrary
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
Sleep
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetModuleHandleA
GetStartupInfoA

msvcrt

srand
time
__CxxFrameHandler
_access
rand
??3@YAXPAX@Z
atol
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
_except_handler3
_itoa

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ