da89f233967f315b8affa1508a2778f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da89f233967f315b8affa1508a2778f1_JaffaCakes118
Size

178KB
MD5

da89f233967f315b8affa1508a2778f1
SHA1

00ea28d0929ed118c5229dc435db0ec3eff76ead
SHA256

bfc82942f097d287165045978070013ac528a178bfdd6976786e5f8c1699cec5
SHA512

d194c527d7bb340e3f22ff3b3aa4290041b6c56c44f037e9df5e6b5b06bc2c759e77ca15d9a0060cd5c2cb2445614ff9ced01f72d6ef7d454a91464f94fce9f6
SSDEEP

3072:skdNIvi9GS9w6L1ls3QuJrjEt49MWMebkeCSw8y+P0xhmPMqACxj7:skdNIi9wklsMebkU3y+PChSMh8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da89f233967f315b8affa1508a2778f1_JaffaCakes118

Files

da89f233967f315b8affa1508a2778f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0dfcf0f33cb9013aed367def900a3092

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GetProcessHeap
GetLastError
lstrcatA
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
CloseHandle
LocalFileTimeToFileTime
SystemTimeToFileTime
GetModuleFileNameA
GetTempPathA
lstrcpyA
lstrlenA
lstrcmpiA
GetFileAttributesA
Sleep
GetCommandLineA
GetStartupInfoA

user32

wsprintfA

shlwapi

SHDeleteKeyA

msvcrt

_strnicmp
_strlwr
_except_handler3
strcpy
strchr
strncat
strcat
memset
strlen
rand
srand
_ftol
??2@YAPAXI@Z
memcpy
__CxxFrameHandler
_EH_prolog
_CxxThrowException
??3@YAXPAX@Z
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_stricmp

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ