860d4a5eda91708023e8bbaad4ba23bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

860d4a5eda91708023e8bbaad4ba23bb_JaffaCakes118
Size

24KB
MD5

860d4a5eda91708023e8bbaad4ba23bb
SHA1

1f70d958b7f2da99ce6925071ed0ff7e6f49b8f1
SHA256

2c24ee33ca77d1c03da75bb465019dd8778497f6e57fc06d0da08d0de8a2872a
SHA512

ef0e6cd0c932e6c905df0aae93aff90de36ceb5fe464b98f39f23e4f9a71477c9be7f7224819e40b3b4e3de8ce0eb6d81e090a05bb6ab6eddbee738f0f0662ad
SSDEEP

384:P3/A0S4dz9kYjspDDgOREu3NxRN84GUDd/mnQR1S:P3IT4dzGY4pPfRr9xRNNGuLvS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
860d4a5eda91708023e8bbaad4ba23bb_JaffaCakes118

Files

860d4a5eda91708023e8bbaad4ba23bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9109740b3c0aafa22e38889a4cdac03b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetStartupInfoA
GetLocalTime
lstrcatA
ExitProcess
GetModuleFileNameA
lstrlenA
lstrcpyA
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleHandleA

user32

wsprintfA

wininet

InternetCloseHandle

msvcrt

_onexit
_controlfp
strncpy
rand
atoi
fclose
fprintf
fopen
_except_handler3
strtok
strstr
isspace
??3@YAXPAX@Z
__dllonexit
strncmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE