cedad79d42f78db8752979e40b858ff2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cedad79d42f78db8752979e40b858ff2_JaffaCakes118
Size

26KB
MD5

cedad79d42f78db8752979e40b858ff2
SHA1

85c5a933b953c2f9ee86227ef7bffbd38fd6ea44
SHA256

b5ca3ac0f5ae14c2ec271b6c4bf2781af6ec6d34a40eaf6abc0347769b513474
SHA512

d90fd17e9a7fad7dfade5aa4613b80e7dd319fcc04b55ddb88105723be20c6f51191995b40639041a85314fb9b1a0e524bffb6413ab93ac1a083f8260f16dac7
SSDEEP

768:lw85c1p5+9KmhWT3Kf3pAmH5FrLwmKAq+itCbNebdgfLsXzrTuF/z0r20sLrLBqZ:l7uy/UusvfdshTGX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cedad79d42f78db8752979e40b858ff2_JaffaCakes118

Files

cedad79d42f78db8752979e40b858ff2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b04814fd120d3b7a3596367b915de854

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

strtok
strncpy
atoi
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_snprintf
exit
strchr
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
srand
strstr
_cexit
??1type_info@@UAE@XZ
_CxxThrowException
??_V@YAXPAX@Z
__CxxFrameHandler
memcpy
strcat
sprintf
rand
strcmp
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
??_U@YAPAXI@Z
strcpy
_vsnprintf
strlen
_acmdln
_except_handler3
?terminate@@YAXXZ

kernel32

lstrcmpiA
GetModuleHandleA
GetLastError
ExitThread
GetTickCount
Sleep
GetProcAddress
LoadLibraryA
GetStartupInfoA
LocalFree

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE