71b3cf6204bdd965dd5b8c28a87a1cd1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71b3cf6204bdd965dd5b8c28a87a1cd1_JaffaCakes118
Size

24KB
MD5

71b3cf6204bdd965dd5b8c28a87a1cd1
SHA1

4a3f4e15326b79886cd9b288879ae20829e1e37d
SHA256

b3be5ca32e3c7c9e2018df674f642235e4dcd45315b273f22b7fd717304d59d5
SHA512

2a1380188737f2f3ccf9dfec21e09baf9e3d55c5b9962e15e47765dc1e8ab52a9ec369a99a417615c42d2cec0c052de8c3f1167037321318f91df5865226473c
SSDEEP

384:Vn++Tr+JMM82tIDlbBRGWsRg3Rq742qRlJrVM7rJHVh39Dj1+:k+TCOM82tIDlbBRGWsRg3Rq74/RlJrVv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71b3cf6204bdd965dd5b8c28a87a1cd1_JaffaCakes118

Files

71b3cf6204bdd965dd5b8c28a87a1cd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09c080bc591ff19283365df644511b19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA

user32

PostMessageA
DefWindowProcA
CreateWindowExA
RegisterClassExA
DispatchMessageA
GetMessageA
TranslateMessage

msvcrt

_exit
_controlfp
_except_handler3
??3@YAXPAX@Z
??2@YAPAXI@Z
atol
fclose
fwrite
fopen
sprintf
__set_app_type
srand
time
rand
__CxxFrameHandler
strchr
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE