a95dde5a01ac514cd2a6e8062075a411_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a95dde5a01ac514cd2a6e8062075a411_JaffaCakes118
Size

20KB
MD5

a95dde5a01ac514cd2a6e8062075a411
SHA1

eaca35bf77912be2094e899b9554edb63078bbac
SHA256

f32542562d099c308845c86f7419f4739e840b1502b8fce1a79a354d07431500
SHA512

01cfea3d0bfaa83ef7685c4eb11a55546fc47e1a425c7f7dfbe235d481e4f909ae485282415d49db3fc23cf7c49903c4a0b6eef673200a30bedc9e3b78e72fa4
SSDEEP

192:cZcrfmUYk+MLso+c8WXMB7XWBw3R7oH2W2kjYP1oyPqQ9Z1:IcrfYq+n8GWe3R7vWbS1R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a95dde5a01ac514cd2a6e8062075a411_JaffaCakes118

Files

a95dde5a01ac514cd2a6e8062075a411_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cb621b2044344231591d2a54ce3879e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleFileNameA
CloseHandle
CreateProcessA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetStartupInfoA

msvcrt

_except_handler3
sprintf
rand
srand
??2@YAPAXI@Z
__CxxFrameHandler
atol
_access
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
time
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ