b9d607a4c1f803962ad279961cc97ea4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9d607a4c1f803962ad279961cc97ea4_JaffaCakes118
Size

24KB
MD5

b9d607a4c1f803962ad279961cc97ea4
SHA1

c102f345d91b84660d29910716fd79bc725516ed
SHA256

b6bb6a615cd4b69b6ef356687c3d89aee6c10cd9017983a0a0123dcd34b73dc7
SHA512

b7c2f97298f193d58cf1d3859e42a86ebcd5b5b4ef40ef8d960ea2aeb3dc697149f3e3047e33aa37679ac35894f820e83a968645a3564f0559618cee7a935704
SSDEEP

384:P3/A0S4dz9kYjspDDgOREu3NxRN84GUDd/cbnQR12g:P3IT4dzGY4pPfRr9xRNNGuNvZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9d607a4c1f803962ad279961cc97ea4_JaffaCakes118

Files

b9d607a4c1f803962ad279961cc97ea4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9109740b3c0aafa22e38889a4cdac03b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetStartupInfoA
GetLocalTime
lstrcatA
ExitProcess
GetModuleFileNameA
lstrlenA
lstrcpyA
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleHandleA

user32

wsprintfA

wininet

InternetCloseHandle

msvcrt

_onexit
_controlfp
strncpy
rand
atoi
fclose
fprintf
fopen
_except_handler3
strtok
strstr
isspace
??3@YAXPAX@Z
__dllonexit
strncmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE