d6a30599e676f5fb2a17c466afb52679_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6a30599e676f5fb2a17c466afb52679_JaffaCakes118
Size

85KB
MD5

d6a30599e676f5fb2a17c466afb52679
SHA1

fbc26fd69ae0402bf856675d06a17469173dc0e3
SHA256

ddd941ce144b5464b38683d671beed304fd6f556d4462f2ce33ad65e8ea5d64e
SHA512

0f0ab513f495fffb1ef5e832faf71c38d9ffcedf9c6892d2ab9398eeaf579d77ec8d543e09c953b4e22ca187f2d1c1d2b506db1a3e2a5e1f432acf745e53228e
SSDEEP

1536:BPBRzy/HRbPshe1TqpNnjq/XgS3z25mDuAZL3D5wCtUPdbc:TdCx7sY1+pZCXg424aAJ3DKlPdb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6a30599e676f5fb2a17c466afb52679_JaffaCakes118

Files

d6a30599e676f5fb2a17c466afb52679_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94890e9ec16a217a713ac391489436f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

rand
srand
time
_write
_open
??2@YAPAXI@Z
fclose
fputc
fgetc
fread
fseek
fopen
_read
_exit
_close
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strncpy
sprintf
free
_lseek
_XcptFilter
malloc

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
GetStartupInfoA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ