47889cbea320fe58eabb93fee4afec94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47889cbea320fe58eabb93fee4afec94_JaffaCakes118
Size

96KB
MD5

47889cbea320fe58eabb93fee4afec94
SHA1

bb3aa3c81512dc3eacdedc46c18c29f4070b0cd9
SHA256

ac693efe285969618c221fbc38913949ba3f14f214184ed599d5c4994e31f19b
SHA512

7a330b0f9a7913c5abf714f9096c83e7219edae1ef33898eaaf00c8fe46acb7ac8af3c762b8fcc648a7af59e46a35f470ec4f7dc150ca0f1c9a41f4a4adc3d3b
SSDEEP

1536:rWW9hZZ+PVGdm9Rb7HDlcDw/sH3lVQ3poAC/g8v9I7mkkFT8:rLpYN4m9LcDw+qqAC/gaKmkkK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47889cbea320fe58eabb93fee4afec94_JaffaCakes118

Files

47889cbea320fe58eabb93fee4afec94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2103def0a8d43f4871d80164c210d631

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord5856
ord6648
ord6663
ord2915
ord941
ord2614
ord540
ord800
ord823
ord860
ord825

msvcrt

_CxxThrowException
_except_handler3
strncpy
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
atoi
__CxxFrameHandler
sprintf
rand
strstr
srand
_strlwr
_stricmp
_strrev

kernel32

GetProcAddress
CreateThread
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ