b65323fc85779d0cdd2b14503d0a75c4_JaffaCakes118 | Triage

Sharing

General

Target

b65323fc85779d0cdd2b14503d0a75c4_JaffaCakes118
Size

24KB
MD5

b65323fc85779d0cdd2b14503d0a75c4
SHA1

0a34d04f47be1d986d3dbc0f33a089cc215b36b4
SHA256

fe400be4574c5c1df87fcc8515d37c1eec73e73739fdb3f6d6d67709c7edd1fb
SHA512

26520664e6692f430cf80298671cb0776e64451050af692ce9f3fda33f780b91234cafad5138c539500c76dc67b89eceff533283388fc079165d8cc9d356faae
SSDEEP

384:AwVyD8hmsLWMIfO+fBBWnf9YESabHHy9vPScArJ1:AwVy4hmsL3IfO+fBBWnlXSargPScAr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b65323fc85779d0cdd2b14503d0a75c4_JaffaCakes118

Files

b65323fc85779d0cdd2b14503d0a75c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

02e4516fe80a4758d80456c00a439407

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetSystemDirectoryA
Sleep
GetModuleFileNameA
FreeLibrary
GetModuleHandleA
GetStartupInfoA

user32

ShowWindow
PostMessageA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
CreateWindowExA

msvcrt

time
_controlfp
_except_handler3
__set_app_type
sprintf
rand
__CxxFrameHandler
fclose
fwrite
__p__fmode
??2@YAPAXI@Z
atol
??3@YAXPAX@Z
strchr
srand
fopen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE