6007bbfceead3a7683549c2c28cc3099_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6007bbfceead3a7683549c2c28cc3099_JaffaCakes118
Size

20KB
MD5

6007bbfceead3a7683549c2c28cc3099
SHA1

0a309cb378f29ea9c76d0d5c0c772cc98e3062e7
SHA256

a39a87ad94617523bbb6a8db8c3b4a7fd2e7430621ccdb19f30f4927c93c5902
SHA512

3895f647155e8080a4b1f41b0cf2ee98c4f14295ba7cb83fd4b191f79c76e900ce889dec4105dee8ddd060e3b7588fb99f970c45d47728e1ea0a71a688e207be
SSDEEP

96:EZxYFRDmuFb/IocOGORi2/dPf668qufl6+QiYVRQbS5PpIytknWplSc4AkDf0h6b:rtOYWVGG4Zn8LVoHdsP1oyPqQ9Z1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6007bbfceead3a7683549c2c28cc3099_JaffaCakes118

Files

6007bbfceead3a7683549c2c28cc3099_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c25449b1bd1225fc70ff3029cc941d9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateProcessA
MoveFileA
DeleteFileA
WriteFile
CreateFileA
Sleep
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetStartupInfoA

msvcrt

srand
time
isalpha
isalnum
div
ceil
atoi
rand
_access
_except_handler3
atol
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
__CxxFrameHandler
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ