b3c782f3c9cd2add7b6df0e7c4845637_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3c782f3c9cd2add7b6df0e7c4845637_JaffaCakes118
Size

24KB
MD5

b3c782f3c9cd2add7b6df0e7c4845637
SHA1

61605faa60047cba95a2c719b3631385e8fa36e2
SHA256

f2805212f957052476b003982a5e72abffe4f77c03085663d362f2ae1b99662b
SHA512

7f78af060b44c63d2c6fe695686224f47699d7d2e8f71c71a7c0615d34235e8849a32102e551a85ff7d0260ee25b39c4270c5f5b1e091333dfe232580cdae582
SSDEEP

192:JSVkYRMCUdn34pURbe8ZnvTjW1ODqaAGubcNP1oy9HNpkE9qhKQ9Z1:JSVkYaXdnqKKOb4gJPuby1PNv9M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3c782f3c9cd2add7b6df0e7c4845637_JaffaCakes118

Files

b3c782f3c9cd2add7b6df0e7c4845637_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac0332de9c882a5e4aa14ed4313b1ded

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CloseHandle
CreateProcessA
GetProcAddress
LoadLibraryA
Sleep
FreeLibrary
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetModuleHandleA
GetStartupInfoA

msvcrt

srand
time
__CxxFrameHandler
??3@YAXPAX@Z
rand
_except_handler3
strstr
_access
atol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
??2@YAPAXI@Z
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ