db8d15e066df33f1e61a0dfb74c9b7e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db8d15e066df33f1e61a0dfb74c9b7e7_JaffaCakes118
Size

197KB
MD5

db8d15e066df33f1e61a0dfb74c9b7e7
SHA1

f5a55f1188f06938c2855636afa7369e8ed05eac
SHA256

819684b5c3490ba0c59751f78d2fff6d58ea57e78e6be4bdeec4e501d5ff5f0e
SHA512

eb2f138d1a56d577967633b2ddeda94c21fe1ba72b148a14328aff8a5518f8094aeb775e18fd30af2e97cdfdac4436985a6272fa4d4db14063906f4c504084ee
SSDEEP

1536:qH3pgGA77rv9n+aA0qO2Z81DSoc3l818NKhhbLv4JQ9vyVVyAD3lrBx3F77Ga60l:qH3XA77Lqk1D+61qKht4evm177160l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db8d15e066df33f1e61a0dfb74c9b7e7_JaffaCakes118

Files

db8d15e066df33f1e61a0dfb74c9b7e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfdde929a7f5781747a7b0e26fedb4a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CloseHandle
CreateProcessA
Sleep
FreeLibrary
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetModuleHandleA
GetStartupInfoA

msvcrt

rand
srand
time
__CxxFrameHandler
sprintf
??2@YAPAXI@Z
_except_handler3
atol
_access
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
strstr
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ