dba4bc0e3e4d36a488a427df8676f686_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dba4bc0e3e4d36a488a427df8676f686_JaffaCakes118
Size

24KB
MD5

dba4bc0e3e4d36a488a427df8676f686
SHA1

c6f03ea074d6ba41a418b5b86cc54577029d5068
SHA256

b49fcc154933e6974f9a1efe9394366b1ec0283a257d871d7824c53fa84a54ac
SHA512

b38b7c31319801815cce3bf2b78d7e2018c7e92b9dd935c4356748469042378d205e70a2cef73f10b3314c41c7e8da8482f7d7dd182ade8c6396b9113c8d195a
SSDEEP

384:oJss9BWVnYKCMs5J+9KmhWT3Kf3pwqLZoTQ4cR3SYtm9yqaBI0UKzB596Vc5ERFH:oJss9BWVnYfL5J+9KmhWT3Kf3pw6otcq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dba4bc0e3e4d36a488a427df8676f686_JaffaCakes118

Files

dba4bc0e3e4d36a488a427df8676f686_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6afebdcc6ccd48ac297a4c97509fcb37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp71

?_Nomemory@std@@YAXXZ

oleaut32

VariantInit
SysAllocString
VariantClear

msvcr71

strstr
__CxxFrameHandler
_except_handler3
strlen
_vsnprintf
strcpy
??3@YAXPAX@Z
strcmp
srand
memcpy
??_V@YAXPAX@Z
strchr
sprintf
exit
strtok
rand
malloc
_callnewh
_CxxThrowException
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
?terminate@@YAXXZ
strcat
memset
strncpy

kernel32

GetModuleHandleA
GetProcAddress
GetStartupInfoA
LocalFree
CloseHandle
Sleep
GetTickCount
LoadLibraryA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE