db2297a3e825ff2bff394b66c444f926_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db2297a3e825ff2bff394b66c444f926_JaffaCakes118
Size

24KB
MD5

db2297a3e825ff2bff394b66c444f926
SHA1

69ee95f69bf8b7e5c4b4a4b714204dec5e2a6b2b
SHA256

78ae5cf446de323516072dd3c33536e8d979839d2394d9327d3257ef6019e634
SHA512

ba41481d76393dbb66b6b939fe47f194082c74db1be9b0013b885b38560414c4b9c700e4257b2a05e63d297c31f4ea3bae12fadaadd4e41db12b2bd71b9b3ab4
SSDEEP

384:xUvg2vq0DcK/EIBe/vvSZh6npNhvRvCvC2EOU9qto1Eu0:xUvg29cKsMe/vvSZcpHvRvCvTEjqMEu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db2297a3e825ff2bff394b66c444f926_JaffaCakes118

Files

db2297a3e825ff2bff394b66c444f926_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d6095a567e0a06ee9e7fb31c9b261f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CloseHandle
CreateProcessA
Sleep
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
FreeLibrary
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetModuleHandleA
GetStartupInfoA

msvcrt

isupper
isspace
ispunct
isprint
islower
isgraph
isdigit
??3@YAXPAX@Z
strstr
??2@YAPAXI@Z
isalpha
isxdigit
div
ceil
sprintf
rand
srand
time
__CxxFrameHandler
_except_handler3
atol
_access
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
ldiv
isalnum
_itoa

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ