d0bae0bc693b077e55d30d5ec364082d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0bae0bc693b077e55d30d5ec364082d_JaffaCakes118
Size

24KB
MD5

d0bae0bc693b077e55d30d5ec364082d
SHA1

ac1cb1151298ee1741e35531dcf534dd2f7cf239
SHA256

d249f6ce52896505524f2d2a484b785710c4af0ed944a759ba58a4bc0dd89015
SHA512

508930d04740648707e52af16521e71788d3eaa62c3f8f314fb0ae85d33c448ad5aa3a99eed4afac7dede921c5cd4bca93f2adb04fde7eada0dfa27761086b72
SSDEEP

192:9izjf9APSgYoBXtbq2O5ZdUNRLf1VPJqvlnHbcQ+P1oy3OjxKQ9Z1:90jfkRhz+/5kPjPJqvlnHbcv1JOl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0bae0bc693b077e55d30d5ec364082d_JaffaCakes118

Files

d0bae0bc693b077e55d30d5ec364082d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

076f245122b10e2a1ffc5a3a7560117b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetModuleFileNameA
CloseHandle
CreateProcessA
GetProcAddress
LoadLibraryA
MoveFileA
DeleteFileA
WriteFile
CreateFileA
FreeLibrary
GetModuleHandleA
GetStartupInfoA

msvcrt

isprint
islower
isgraph
isdigit
isalpha
isalnum
div
ceil
??2@YAPAXI@Z
ispunct
rand
sprintf
srand
time
__CxxFrameHandler
_access
strstr
atol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
_except_handler3
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ