8316b83766540cf86da5d3b8eeb8fb31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8316b83766540cf86da5d3b8eeb8fb31_JaffaCakes118
Size

24KB
MD5

8316b83766540cf86da5d3b8eeb8fb31
SHA1

14ffd52394fc7e9c83a0d70e8311a60e598872a8
SHA256

3877a9167494d8d344a0c49274c1e4f91b4c35398e74a9b941303d35822a7aeb
SHA512

d41e7f1df51543b6054f515d50d7527ce479513f291e84c339d31e586513ccd9a54210ddefd469e99fa968ffc8d40605bc44b580bb8b3a8fde3aed7d8a161b2f
SSDEEP

384:P3/A0S4dz9kYjspDDgOREu3NxRN84GUDd/cbnQR1xg:P3IT4dzGY4pPfRr9xRNNGuNv6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8316b83766540cf86da5d3b8eeb8fb31_JaffaCakes118

Files

8316b83766540cf86da5d3b8eeb8fb31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9109740b3c0aafa22e38889a4cdac03b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetStartupInfoA
GetLocalTime
lstrcatA
ExitProcess
GetModuleFileNameA
lstrlenA
lstrcpyA
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleHandleA

user32

wsprintfA

wininet

InternetCloseHandle

msvcrt

_onexit
_controlfp
strncpy
rand
atoi
fclose
fprintf
fopen
_except_handler3
strtok
strstr
isspace
??3@YAXPAX@Z
__dllonexit
strncmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE