7385641a16ca282b5a790098e26643db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7385641a16ca282b5a790098e26643db_JaffaCakes118
Size

28KB
MD5

7385641a16ca282b5a790098e26643db
SHA1

cdaaf30c961011a2cc3cc2f4b5d0b33910d86395
SHA256

4cb88b12612455957a48a875223842da21d5b7682d575ab5adde195ee17ef443
SHA512

1296241ce0b4ac80de0f667a6a766d3d6446c1528ec406b73e7c4348a986e11c1792a8b76bcdfc71ac898c6a079c5622579f79e6cc6fa713d1a8f6b92f9f009e
SSDEEP

384:q6xclIosi/U2ctu7E9z6F8aShKY6cG2r1RW:q6yG9i/U2ctu7Ed6FH1cG2hRW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7385641a16ca282b5a790098e26643db_JaffaCakes118

Files

7385641a16ca282b5a790098e26643db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

785e00fd66a8a136eb0bd35ccbf4a9e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
Sleep
GetModuleHandleA
GetStartupInfoA

user32

GetForegroundWindow
PostQuitMessage
DefWindowProcA
GetMessageA
TranslateMessage
RegisterClassExA
ShowWindow
CreateWindowExA

msvcrt

atol
_controlfp
_except_handler3
__set_app_type
??3@YAXPAX@Z
sprintf
fopen
fwrite
fclose
strchr
__p__fmode
srand
time
rand
__CxxFrameHandler
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ