61348ff27f7e1da7c8ecfd79379d7310_JaffaCakes118 | Triage

Sharing

General

Target

61348ff27f7e1da7c8ecfd79379d7310_JaffaCakes118
Size

71KB
MD5

61348ff27f7e1da7c8ecfd79379d7310
SHA1

e96385e5360ebe0e9e732d02b8237a8fe9f0c273
SHA256

c29b6a3e6bd74be70638ff456eb4ef136c7a35f847541e68ee8dc47a0b93661d
SHA512

787d3c2768d9943bde5b441ef1a373c6c48d9a38f129a327dfbf7484ed7fc0faa67035e4d07deb6a05fd134dbe363a2c96c055463b1236231d5addc9313e1ec9
SSDEEP

1536:uvREh++6cPWjcFcOSb0YA67XWpHakjPkHatOjftih:uJi++6cPmcFcOSb08XKd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61348ff27f7e1da7c8ecfd79379d7310_JaffaCakes118

Files

61348ff27f7e1da7c8ecfd79379d7310_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a22dd81f5a2d3d7e8a8b29ec407327d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcpyA
Sleep
lstrcatA
GetLastError
GetProcAddress
LoadLibraryA
GetModuleHandleA
lstrcmpiA
FreeLibrary
GetStartupInfoA

msvcrt

memset
strstr
memcpy
free
fwrite
malloc
fclose
fopen
memmove
isspace
strlen
strchr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strncmp

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ