a0f030b513e461333914b5a955688e66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0f030b513e461333914b5a955688e66_JaffaCakes118
Size

35KB
MD5

a0f030b513e461333914b5a955688e66
SHA1

33905d1e91e0c81db2e16c7f6777687b056fc951
SHA256

78cfb114ec50b18c8c08238f79b978d81587248ea8782650a7095a427695187e
SHA512

249aa91734529bc14689d70a26990e34d0cd6ace6110753938f258005b39a65186a4dd4e9e7791ee7fcca0f3e51e398b5d100d1385be49d46bb3f611f0d345df
SSDEEP

768:7oDKE2X9uEsDo2CLvyn10yoXtBu+Ct+50RmGFY:7kd89uEZU613I2QmGS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0f030b513e461333914b5a955688e66_JaffaCakes118

Files

a0f030b513e461333914b5a955688e66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d50f8e31c6e6409850a148fbd7f4643a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

printf
free
_snwprintf
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
rand
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
sprintf
malloc
_snprintf
memcpy
strlen
atoi
atol
wcscpy
strstr
strcmp
strcat
fopen
fclose
_initterm
strcpy

kernel32

SetErrorMode
DeleteFileW
GetModuleFileNameW
GetCommandLineW
GetTickCount
MultiByteToWideChar
CreateFileW
WriteFile
CloseHandle
GetLastError
SetLastError
Sleep
GetModuleHandleA
GetProcAddress
GetStartupInfoA

ws2_32

send
closesocket
socket

user32

MessageBoxA
FindWindowA
IsZoomed
GetClassNameA

shell32

SHGetSpecialFolderPathW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ