d06202ad581a2a9be23fef502e8ae019_JaffaCakes118 | Triage

Sharing

General

Target

d06202ad581a2a9be23fef502e8ae019_JaffaCakes118
Size

28KB
MD5

d06202ad581a2a9be23fef502e8ae019
SHA1

70edc6834c456a923512572796dcf48e951614ff
SHA256

c1a6b49c7d4ef6bff7d6d0c1575a4905ad19f4eb367d2205312431eadaf55261
SHA512

3a725ef81a5d0b2afcbc0b4cb63c19fd2ac5d10c652877d9acdc87de709def56f8dbfef39ffc22ed9fc1fb39fbf64478647038c5bfe6bc287f608209636ef9cf
SSDEEP

384:DyOEoGKemA6vN2YqG5sfE+xnbeYJpbb9GTxf1/M:DJEoGKxA6F2YqG5sfE+xnbeShb4Tzk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d06202ad581a2a9be23fef502e8ae019_JaffaCakes118

Files

d06202ad581a2a9be23fef502e8ae019_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85fcb2d4acf2b1b1acc57e269eb9dc48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
Sleep
GetModuleHandleA
GetStartupInfoA

user32

ShowWindow
GetMessageA
TranslateMessage
PostQuitMessage
DefWindowProcA
CreateWindowExA
RegisterClassExA
GetForegroundWindow

msvcrt

atol
_controlfp
_except_handler3
__set_app_type
fclose
fwrite
fopen
sprintf
rand
__CxxFrameHandler
__p__fmode
time
??3@YAXPAX@Z
strchr
??2@YAPAXI@Z
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ