81e57f83d0e7cc790a5224a91889b19a_JaffaCakes118 | Triage

Sharing

General

Target

81e57f83d0e7cc790a5224a91889b19a_JaffaCakes118
Size

28KB
MD5

81e57f83d0e7cc790a5224a91889b19a
SHA1

963a597c3938d31a3626e688d8e3ba82aae5601e
SHA256

352b25ebc11ae9f2e8c4e9082c609a78d030ee6bbb40f4fd4868ba787d96bd14
SHA512

1e1d3bcb02eab180ef097c9e755106af6c434c038e6767b66351e2302aa9e80fe907e580798c61d9fcec40809d5071b7d05dda7e3fc5c66e24b88702b418a074
SSDEEP

384:LIRq/MgWU/fYx1Fd1B9lsxGmPbsgTw6i989pArK:WqiFd9yr72K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81e57f83d0e7cc790a5224a91889b19a_JaffaCakes118

Files

81e57f83d0e7cc790a5224a91889b19a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f77259503fae7ddccce263f34b1af736

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CloseHandle
GetComputerNameA
GetLastError
CreateMutexA
SetLastError
GetModuleHandleA
CreateFileA
WriteFile
DeleteFileA
LoadLibraryA
GetProcAddress
lstrcpynA
GetStartupInfoA

msvcrt

strchr
strncpy
strcmp
atoi
free
calloc
_vsnprintf
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strstr
rand
time
srand
malloc
memset
strlen
_snprintf
_XcptFilter

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE