787bdaf83a7b0926f22e8598d0ef7654_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

787bdaf83a7b0926f22e8598d0ef7654_JaffaCakes118
Size

132KB
MD5

787bdaf83a7b0926f22e8598d0ef7654
SHA1

3ede7dcdd91c08d6a527f535736e0ea38c3b6f89
SHA256

e76555f1c338d4df405acef5130fd2c984fb7a8ec5aecb62dca2378e5f2befad
SHA512

c7d5c4f83d5a374479a74b831dd11ac876cfc55a1ff8999377abda29d8c69e278670090930a2bb0209da922913757f89839694d0ab6f491c8e7f86357f6a1427
SSDEEP

3072:CKrpqYLBsBMbbNWgg5d3h5A/28R4hGt4VCXN:vp9CDgKhy/mkr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
787bdaf83a7b0926f22e8598d0ef7654_JaffaCakes118

Files

787bdaf83a7b0926f22e8598d0ef7654_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6da9690f666fa4146b9381dbb95392d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
SetFilePointer
FreeResource
GetLocalTime
CreateFileA
LoadResource
FindResourceA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

wsprintfA

msvcrt

memset
??2@YAPAXI@Z
strlen
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter

Sections

.text
Size: 4KB - Virtual size: 940B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ