d3212c84d4b466d1297d9a89b88ce306_JaffaCakes118 | Triage

Sharing

General

Target

d3212c84d4b466d1297d9a89b88ce306_JaffaCakes118
Size

24KB
MD5

d3212c84d4b466d1297d9a89b88ce306
SHA1

4e08a32cc085ead10e62315947ab0d90f3079d2b
SHA256

4068b49c5c72d4f3c86eddc0b81c84226a6cb0e9f7e5a101fa6431ea84ad231e
SHA512

fe1a0ab7ff7d1ab8dfd3874fe61457d7406f0777552970adb46f86c4c932c789e9b92206eaceeb8ad0145fbd8b6c969d737833450904f3b3552a6c875d3584d1
SSDEEP

384:LqZvXusLLqCvQLjYWpo2bHeF5sA8M6myYXXUdSrauS7yYKOXIV3204:uNekeCvQLjYWp7bnApbvhraqKXrH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3212c84d4b466d1297d9a89b88ce306_JaffaCakes118

Files

d3212c84d4b466d1297d9a89b88ce306_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa54c5481e04d192d9ca02ed9ec6bbf3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetCommandLineA
GetTickCount

msvcrt

realloc
strstr
srand
rand

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ