bd893a151094afa3755195b5bf29b150_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd893a151094afa3755195b5bf29b150_JaffaCakes118
Size

24KB
MD5

bd893a151094afa3755195b5bf29b150
SHA1

b213516ee813fda1f6070139cae7f89877d06133
SHA256

6fcf8261b38a6f612dbbd27dc6b3729ec3b10e787697f7ae51b5a2db3d3e5bbc
SHA512

992022c693703b729464f33969660fecaa34583d3aa5f03292cae8189ef29fa43444d4a5f78479d888615b3f147a29a23431b5a76b3e15fb33e556d4f151cada
SSDEEP

192:B088WjzMMOELxazBoLSEbQOQpABwP1oyyatFo+KQ9Z1:CNjEUoS3pAA1katFo+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd893a151094afa3755195b5bf29b150_JaffaCakes118

Files

bd893a151094afa3755195b5bf29b150_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b840b5738f38ee7d772be1f103d48e94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateProcessA
WriteFile
CreateFileA
GetLongPathNameA
GetTempPathA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

isspace
ispunct
isprint
islower
isgraph
isdigit
isalpha
isalnum
div
ceil
atoi
sprintf
isupper
srand
time
__CxxFrameHandler
_except_handler3
??3@YAXPAX@Z
??2@YAPAXI@Z
atol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
isxdigit
rand
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ