96c91b60357e23e9a9d456dd934f5f31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96c91b60357e23e9a9d456dd934f5f31_JaffaCakes118
Size

8KB
MD5

96c91b60357e23e9a9d456dd934f5f31
SHA1

310d439e1048a57e763ac890ded1b353ec583dcc
SHA256

c2b2d75eb5e730f61d394357d60c7d986da51a6cd072fdf43bbfbeabd2111616
SHA512

bf96e4bf88bcca7a6488d05f4e7004c4cf0b8370ba5427ff17ae6a108cc106f5deb5682a88efa69bb8f7683d797fde41415e82d38e7fe201f2a1c35680ea350e
SSDEEP

96:HcRRvw9qPxka9xOa5DOHh5wJYs7c3TFWtboynhVatsVq9K/JxNcu:83yc/PVtE0Ks8k1oyno9K/Jc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96c91b60357e23e9a9d456dd934f5f31_JaffaCakes118

Files

96c91b60357e23e9a9d456dd934f5f31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1c7c3df8b05475a97415b8a1a465e49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess
SetErrorMode
CreateMutexA
OpenMutexA
CreateThread
GetStartupInfoA
GetModuleHandleA

user32

GetMenu
FindWindowExA
SendMessageA
IsWindow
FindWindowA
wsprintfA

msvcrt

??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_CxxThrowException
_EH_prolog
strlen
??0exception@@QAE@ABV0@@Z
memmove
memcpy
_controlfp
_except_handler3
__set_app_type
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
??1type_info@@UAE@XZ

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 569B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE