b3b94cf8827d7129de1e9492d7473b3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3b94cf8827d7129de1e9492d7473b3f_JaffaCakes118
Size

28KB
MD5

b3b94cf8827d7129de1e9492d7473b3f
SHA1

a95cfc9c01c5c642e35d869f10dc9a85b50ebde6
SHA256

9277b3d2429f43d459f5dddd1978772e7107f37b99bebdcca00f091ff9139927
SHA512

c53f31d988e9f58386937face6729c904f4b385a9ffa5abe137c697728a20a4a312fe5f92edec5b45a5da7f05588e1239207e5d4f7a9a7e156db5b27139fc353
SSDEEP

768:ZwzYx9sbE3X5vg9TTBuLW9kqvOBc6YXRyNu/8:Zqc9+E3X5vg9TTBuLW9kqvOBcA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3b94cf8827d7129de1e9492d7473b3f_JaffaCakes118

Files

b3b94cf8827d7129de1e9492d7473b3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc6014acead52cc0287d1544a9f3617a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
Sleep
GetModuleHandleA
GetStartupInfoA

user32

RegisterClassExA
PostQuitMessage
DefWindowProcA
DispatchMessageA
CreateWindowExA
GetMessageA

msvcrt

_exit
_controlfp
fopen
fwrite
fclose
sprintf
rand
__CxxFrameHandler
??2@YAPAXI@Z
_except_handler3
srand
time
??3@YAXPAX@Z
strchr
atol
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ