875e178942396b0952711616973a7727_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

875e178942396b0952711616973a7727_JaffaCakes118
Size

24KB
MD5

875e178942396b0952711616973a7727
SHA1

2b60ffe25b1e2bcb0368fb9ba3446a28e38cd163
SHA256

8ed4fbcb47e6560b67b83ff534af28f5489e0fd2d9145d47be101c258fa0f463
SHA512

92c33bd382cd8b5be0a63bd9061531222702adf4cac056af906db10d207170cc31bf443f452b6853edac6eddfe64b544f678c150ea05e2c3d8afc670a082d32f
SSDEEP

384:rahTrRlw8wuw30EXyybYXn73Urik3WuzCALem2Y1syZh1MPM:rahTrXwvuw30EipXn73Urik3WuzCALei

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
875e178942396b0952711616973a7727_JaffaCakes118

Files

875e178942396b0952711616973a7727_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8bbe73df00080171b9c14e4b87e4a67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
GetModuleHandleA
GetStartupInfoA

user32

RegisterClassExA
ShowWindow
DefWindowProcA
CreateWindowExA

msvcrt

_XcptFilter
??3@YAXPAX@Z
strchr
??2@YAPAXI@Z
sprintf
rand
__CxxFrameHandler
atol
fopen
_controlfp
fclose
srand
time
_exit
fwrite
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE