c9075b2ce110f74efc06274f1d977b1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9075b2ce110f74efc06274f1d977b1c_JaffaCakes118
Size

1.2MB
MD5

c9075b2ce110f74efc06274f1d977b1c
SHA1

a3071f6ceb81a21997897360e654287eecbe8373
SHA256

b116b5b43ffc5f4bd08ba9bb3bcc742569158351aad738056fddaff8bee11407
SHA512

3a0f7f3dd5d21a1807f857ac815b34051c4d65ea5943677ff0824b2a5d591333048b08a2846b51a2807560be8ac4f5a1f5fc4da480f37150e6fbb2aabee4757e
SSDEEP

48:CH15ah2XmfE5FR3SSBu7lTwhzARXBhxhiAJx8gKTBwKLrg9+MBwEFqQ9oDYaHlie:cvXEmNpuxTwNANBHh/yLrZMSGoDdHM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9075b2ce110f74efc06274f1d977b1c_JaffaCakes118

Files

c9075b2ce110f74efc06274f1d977b1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

321b216cc7e79390c5f8e65be33da73d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Dokumente und Einstellungen\christian\Desktop\loader_source\Release\loader.pdb

Imports

kernel32

GetModuleFileNameA
ExitProcess
CreateRemoteThread
GetProcAddress
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
OpenProcess
Process32Next
Process32First
Sleep
lstrcmpA
CloseHandle
CreateToolhelp32Snapshot
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime

msvcr71

_exit
_cexit
exit
__p___initenv
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_c_exit
_except_handler3
__security_error_handler
printf
_XcptFilter

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE