72964d53d584966622294a3bb137689b_JaffaCakes118 | Triage

Sharing

General

Target

72964d53d584966622294a3bb137689b_JaffaCakes118
Size

28KB
MD5

72964d53d584966622294a3bb137689b
SHA1

3c0def786d0eaee9cc17b0cb6a0703d328b54184
SHA256

8fd394511bfe88b5fb636602f8e86cb99f3775e6de83cc4c0192bf1ef172f15b
SHA512

cdc24580234ceb48715933568061ebf64c1d4712fe35cb562b8c6e4552a75c1c1982892a998de01d607f2b7325a18721b17925fa54a32c5ec8b366104eb1b336
SSDEEP

768:LRoZ0LSXz9W1Q7Br+xONXMoLXTBHwy/bSuCp5OR:LRobXzI1Q7BSxONXMoLXTFw8eOR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72964d53d584966622294a3bb137689b_JaffaCakes118

Files

72964d53d584966622294a3bb137689b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8eb9e77739446b25d086ee713314a177

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
GetModuleHandleA
GetStartupInfoA

user32

RegisterClassExA
PostQuitMessage
DefWindowProcA
ShowWindow
FindWindowA
CreateWindowExA

msvcrt

_exit
_controlfp
??3@YAXPAX@Z
strchr
??2@YAPAXI@Z
sprintf
rand
__CxxFrameHandler
atol
_except_handler3
time
fclose
fwrite
fopen
srand
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ