696e15068b048692d58c5932e9ec24df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

696e15068b048692d58c5932e9ec24df_JaffaCakes118
Size

87KB
MD5

696e15068b048692d58c5932e9ec24df
SHA1

e5a95d17c15edecfdff447a0bff63a7a3128bb92
SHA256

3d182e828325412ecc0605fde5da0bdb5fa4e754d6be25daac3d9e8dfe41371d
SHA512

c6c7fa3935613970b38cda985e3063eabfe9db62635e90b2030b82cbdbdfc4d112e028736a8ce07200305572d9bcf697a2008b415fd1132c9015238a891e10ba
SSDEEP

768:/3TdqH4QQC7iYY2sBVj7r8RCcqI4IuSezoEKHuXy+GIrOO:cEKOX8O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
696e15068b048692d58c5932e9ec24df_JaffaCakes118

Files

696e15068b048692d58c5932e9ec24df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c18a2ae868681916be5d5c34c6e4748f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetLogicalDriveStringsA
Sleep

msvcrt

sprintf
strcpy
_except_handler3
_chkesp
memcpy
memcmp
malloc
free
_exit
printf
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
memset
_XcptFilter

mpr

WNetAddConnection2A

rpcrt4

RpcBindingFree
RpcStringFreeA
RpcBindingFromStringBindingA
RpcStringBindingComposeA
NdrFreeBuffer
NdrNsSendReceive
NdrNsGetBuffer
NdrClientInitializeNew
NdrConformantArrayUnmarshall
NdrConvert
NdrConformantStringMarshall
NdrPointerMarshall
NdrConformantStringBufferSize
NdrPointerBufferSize
RpcRaiseException

Sections

.data
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ