8c0d019cd154986633d02347fed9481d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c0d019cd154986633d02347fed9481d_JaffaCakes118
Size

31KB
MD5

8c0d019cd154986633d02347fed9481d
SHA1

17617bf823e8d7caa36869d2363365913c0b7f01
SHA256

4d6b9be127a0235c1443da0e28378596b91e5ca4f62707dbb456f10dc032f254
SHA512

1ac94a1a04219185b6cd53daaee4547ccd0aa7bf5fef4b320745dab3744b5bddac0b4f1db5e3a566f2ab49aacabda501b8a193a502ec0b812e5775ec7bc5a461
SSDEEP

768:k5clp5+9KmhWT3Kf3pAj5Fr40i7rIChe0Pvh2P0NCqybdgfLsXzrYsyLNth98r8:yyiIs/iT+D/nE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c0d019cd154986633d02347fed9481d_JaffaCakes118

Files

8c0d019cd154986633d02347fed9481d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ae34e146390ada18b8fbec5682a8403

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

strtok
strncpy
_snprintf
atoi
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
srand
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??1type_info@@UAE@XZ
_CxxThrowException
strstr
strchr
??_V@YAXPAX@Z
__CxxFrameHandler
memcpy
strcat
sprintf
rand
strcmp
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
??_U@YAPAXI@Z
strcpy
_vsnprintf
strlen
exit
_except_handler3
?terminate@@YAXXZ

oleaut32

VariantInit
SysAllocString
VariantClear

kernel32

ExpandEnvironmentStringsA
GlobalLock
GlobalUnlock
lstrcmpiA
GetModuleHandleA
GetProcAddress
Sleep
GetTickCount
LoadLibraryA
GetStartupInfoA
LocalFree
GlobalAlloc

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE