72df51b8ea78bddd8f50a46095b23623_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72df51b8ea78bddd8f50a46095b23623_JaffaCakes118
Size

83KB
MD5

72df51b8ea78bddd8f50a46095b23623
SHA1

0a34f5467217bef6dc403c833db4d97df742f672
SHA256

991c4075120da1b206799495d1f812b16caf13e5a5ef7f0267ab2b953d12b90a
SHA512

8a34d83238230b6a9ba4f46d7b1db20121f93c28dcaa18616de6279b69e0daafb8b048b894eac830bfb612406404bcb2b3ec2e6ffcb8aa677332c2aa43f9b02a
SSDEEP

1536:1H9UkjizRQCFJznNBiwaFv47l8L6qX6uNryjguApRpnBHweaFGna5ApKLzD:1mS0FJ5BiwaFv47mX5yjguYfaFHN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72df51b8ea78bddd8f50a46095b23623_JaffaCakes118

Files

72df51b8ea78bddd8f50a46095b23623_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05b290766febde5528828b2345b21a64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sprintf
getenv
memset
atoi
srand
_exit
_XcptFilter
exit
_acmdln
??3@YAXPAX@Z
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memcpy
??2@YAPAXI@Z
_except_handler3
strlen
rand
pow
__getmainargs
printf

kernel32

GetModuleHandleA
GetTickCount
LoadLibraryA
GetProcAddress
CreateThread
Sleep
GetStartupInfoA

user32

DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
DefWindowProcA
PostQuitMessage

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ