950d0cbf7a18a12d28329e62dc57548d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

950d0cbf7a18a12d28329e62dc57548d_JaffaCakes118
Size

88KB
MD5

950d0cbf7a18a12d28329e62dc57548d
SHA1

1df41c3d92a695d83d9a21c7628d8b8b3cf94542
SHA256

94bd90efa6bfc7b482991d1ed4c2f5b9939c0e343bd2fdd1d90e56fa8b1c9142
SHA512

a2a3a8e122ff1cc74bc59ce8e6eb41c4841f7b29f7c27fd69ab2a2934cab152030a303be054d4d8a1aa849ee8cc05ae7b7adc38fc897a6a3025b14e35cfd1287
SSDEEP

1536:6FO44AVGdm9RphJtZJWUVg5wpovgg1Oiq3UvCjX/IRQZFTcGg:hQ4m98US5wpoIg1Oiq3UvCjX/I+uGg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
950d0cbf7a18a12d28329e62dc57548d_JaffaCakes118

Files

950d0cbf7a18a12d28329e62dc57548d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45114434f8747d62abecf22a4b76e619

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord860
ord6648
ord6877
ord5856
ord6663
ord941
ord2614
ord540
ord800
ord823
ord2915
ord825

msvcrt

_except_handler3
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_CxxThrowException
strncpy
atoi
__CxxFrameHandler
sprintf
rand
strstr
srand
_stricmp
_strrev

kernel32

GetProcAddress
CreateThread
GetCommandLineA
Sleep
GetTickCount
GetModuleHandleA
GetStartupInfoA
LoadLibraryA

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ