c85415caffabc8b2d6c91df735dfeb47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c85415caffabc8b2d6c91df735dfeb47_JaffaCakes118
Size

19KB
MD5

c85415caffabc8b2d6c91df735dfeb47
SHA1

210656d3ac2d1251828190996484b8eefdf7d720
SHA256

e36b6ada5bde3de005a2a435c05b67c7c14df4e898f56ef583a72f54ce930433
SHA512

03b1545eaf1b45b0f47968a9c6df0614a05c91a7dccc743c68c71f0fbccd65f9aed83b798048eaa1e11cba2ede398dac6fb1b1ff4bf5720fe82acd9c4a4cdfb7
SSDEEP

192:pIZ9XtnTpomcDPAlm3dV+q8qoCjKSzP1oyJUPkTJx:uBVDcDPA8j+q8qoCGQ18Yx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c85415caffabc8b2d6c91df735dfeb47_JaffaCakes118

Files

c85415caffabc8b2d6c91df735dfeb47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfbdf0f37c3d2fe2465677a319eb003f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
MoveFileA
DeleteFileA
CloseHandle
WriteFile
CreateFileA
Sleep
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CreateProcessA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetModuleHandleA
GetStartupInfoA

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
strstr
sprintf
rand
srand
_except_handler3
isalpha
isalnum
div
ceil
__CxxFrameHandler
atol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_access
time
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ