ab3d5d783f632a3ce6f6b7f0feb36e79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab3d5d783f632a3ce6f6b7f0feb36e79_JaffaCakes118
Size

30KB
MD5

ab3d5d783f632a3ce6f6b7f0feb36e79
SHA1

dc26ca2ec8c2466333262ceacd54ae10527757ec
SHA256

125b01e3e48b84f5f9c75fa1a0be45db1af338dc476daf1653f6eb07891a8fd7
SHA512

3242ed8c710fb27e7deff97fc4026a38478e2509d5ca80f422e8c187f41677bf06821e89435513fbd5e9e44c08795440cc4d6cd0327e082e3e9de5336fd9e4be
SSDEEP

768:91eT/J7CHvOcFkxZJC18wd/F5tXltxqxOAjBQeQWQqxgRXXD2:YRMOcFkxZJkH5tXEAIQmgJD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab3d5d783f632a3ce6f6b7f0feb36e79_JaffaCakes118

Files

ab3d5d783f632a3ce6f6b7f0feb36e79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39bf74ae1fa677a5086f042e65a484be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strchr
isdigit
isalpha
sscanf
_strnicmp
_strcmpi
rand
srand
exit
_stricmp
__p___argv
__p___argc
strncmp
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_beginthreadex
_endthreadex
??3@YAXPAX@Z
_strdup
strtok
strstr
atoi
??2@YAPAXI@Z
strncpy
__dllonexit
free

kernel32

GetModuleHandleA
CreateMutexA
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcpynA
CloseHandle
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE