656caffc98a0cc6f7830288c67f5a21b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

656caffc98a0cc6f7830288c67f5a21b_JaffaCakes118
Size

28KB
MD5

656caffc98a0cc6f7830288c67f5a21b
SHA1

d84b70898b995aacd2e41236fa2f6bb1600f1e20
SHA256

1dae675542f0af68e8291f4f9976438b2edc1d1f02eb9ef2560b450979cfdaad
SHA512

b5b86fe56f67fbe6973b4782b00e61cef4101d0ef8e578a70bb911fc6fc6a341aeec561b266bbb34fc54bb406913bcc5e02d03e5a1b3db91bfc8cca84870bb4a
SSDEEP

768:zQM+exTewMY6EQCG1YCTALcGLbZ0+ewg:BDxT3MY6EQCG1YCTALcGLbZ0+G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
656caffc98a0cc6f7830288c67f5a21b_JaffaCakes118

Files

656caffc98a0cc6f7830288c67f5a21b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bf813f1849c9cfd482140aa17ec972a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

RegisterClassExA
GetMessageA
DispatchMessageA
CreateWindowExA
PostQuitMessage
DefWindowProcA

msvcrt

_exit
_controlfp
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
atol
strchr
rand
__CxxFrameHandler
_except_handler3
fwrite
fopen
srand
time
fclose
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ