744e8c12a9d1ed7740583ff3b6646b1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

744e8c12a9d1ed7740583ff3b6646b1f_JaffaCakes118
Size

24KB
MD5

744e8c12a9d1ed7740583ff3b6646b1f
SHA1

f6488fc2a70d48e688b99ec033dd4ffc85fef317
SHA256

e2f59e7e8e8048c1348aa5640f8e025f5fb13722d6959abc1bb7a9a008cc1b7f
SHA512

18d6b5c15d38d099cc6caa347e3d21ed86db59e42bbb729dc7cff06985ec93d2b60aa4c2c143d5b74cb743babda1fa8eefbef9f5e18b1e099d67fa97b9d2a7ab
SSDEEP

384:Jieb92tQWcjNHlAPJ5/8PCBFExJ1qitgt/eHcut1+z:Ueb9CQWcvAB5/8PgFE31qitgt/Gcc+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
744e8c12a9d1ed7740583ff3b6646b1f_JaffaCakes118

Files

744e8c12a9d1ed7740583ff3b6646b1f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

185841d1fb8c99236df39d4951dd87a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleFileNameA
Sleep
GetModuleHandleA
GetStartupInfoA

user32

CreateWindowExA
GetMessageA
DispatchMessageA
TranslateMessage
PostQuitMessage
PostMessageA
RegisterClassExA
DefWindowProcA

msvcrt

atol
_controlfp
_except_handler3
__set_app_type
??3@YAXPAX@Z
strchr
??2@YAPAXI@Z
sprintf
rand
__CxxFrameHandler
__p__fmode
time
fclose
fwrite
fopen
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE