b23fe5058dcd486c44a38a8cb7d60ded_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b23fe5058dcd486c44a38a8cb7d60ded_JaffaCakes118
Size

25KB
MD5

b23fe5058dcd486c44a38a8cb7d60ded
SHA1

df30eae20723749df2b432d3e0395ad4ca6b0276
SHA256

4116ef01f506e1b6abbc245fbb2ec28dcc4eae74c80843a06051b78c27ccaf96
SHA512

2bed4bb9531bd0ab1ded09a9b68adc78856c218b510d1fac95f1087e99ab3adf547408442d04d3c66ab45072f8b01524d060b2d4f12573924a5c59f39883dd98
SSDEEP

384:BbH7jwKDgTr1d6dk8asQZO35ommqmaUf9mJ/6j+fztUmTIdki/pnC:5H7EHR8RjJz66xPIRQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b23fe5058dcd486c44a38a8cb7d60ded_JaffaCakes118

Files

b23fe5058dcd486c44a38a8cb7d60ded_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ebe15c5f433bdbc0f6ba65218a5270a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
WinExec
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__getmainargs
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
srand
rand
sprintf
__p__commode

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ