c873102b5ef0274406eb2ad44d237d4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c873102b5ef0274406eb2ad44d237d4f_JaffaCakes118
Size

20KB
MD5

c873102b5ef0274406eb2ad44d237d4f
SHA1

7c01e478bad08d347df10db55e31dd88a052c409
SHA256

c36f036337310102a8b09ad9a22f73acdea2bd2ee77ce843a16b3f896c3b616e
SHA512

a0131449fe81bb141f34c769da1d1903e23c70e963bc8b42994f045746830e8e77dcf0f333ccaf46a2e445e6c12b924951fb5cee61fd204efeedb874665f5d3c
SSDEEP

192:FNOL4/cI3y1/9HvrMbV6cmnfQjy8PYUQjy9IxfP1oynMdRJ:fOLL15CjRYUQjpn1KdR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c873102b5ef0274406eb2ad44d237d4f_JaffaCakes118

Files

c873102b5ef0274406eb2ad44d237d4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2bbee9440c6dab19c797d4dbe8cf46c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord541
ord940
ord540
ord2818
ord825
ord823
ord4202
ord6283
ord6143
ord665
ord3790
ord354
ord860
ord536
ord6883
ord939
ord801
ord800
ord4129
ord5683
ord858
ord537
ord6930
ord535
ord6282

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__p___argc
__p___argv
atol
srand
time
rand
__CxxFrameHandler
_mbslwr
_stricmp

kernel32

GetModuleFileNameA
Sleep
GetTickCount
WinExec
MoveFileExA
GetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE