79194944a602176014b95dd595a9f533_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79194944a602176014b95dd595a9f533_JaffaCakes118
Size

54KB
MD5

79194944a602176014b95dd595a9f533
SHA1

0f429dc03c62787b7ce47c200eb88ef7b24dde7f
SHA256

ef1e8016baa9b322643bf89943fd334db7bd2edb45c2b8215dd8a5769cd28c1c
SHA512

9b908f48178ecf788dc0133519bbf35b2a3ae7c75155ee63d86e9cafde3932de3971146cfc9634be53296d214b70802729102ff77298a04404c6222f2fba1a2d
SSDEEP

768:AEOTJfrr5ZdcpzzFnToIf1rhjWxzqwZnMKJxTBpAM4JYf8u83ln2Y51+:kr5ZczzFnToIf9hjGzqwDT3AM48C39j+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79194944a602176014b95dd595a9f533_JaffaCakes118

Files

79194944a602176014b95dd595a9f533_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c3ffb9680e36dc48560fe4beb3f22f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FreeResource
WriteFile
SizeofResource
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
LoadResource
FindResourceA
WinExec
GetModuleFileNameA
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetModuleHandleA
GetStartupInfoA

user32

wsprintfA

msvcrt

__p__commode
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
rand
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 974B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ