dd7c74572315e3e3f1d5c271ca59fbc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd7c74572315e3e3f1d5c271ca59fbc9_JaffaCakes118
Size

24KB
MD5

dd7c74572315e3e3f1d5c271ca59fbc9
SHA1

eeabb7712545edc2d6e087ee4d503e5a237b8c09
SHA256

7f72962ef85fcaf63eb94d582b92c54571aa939f7942f21803c8397731a02454
SHA512

2ed98aaf8cd9f029ed2a68e9321a551a2ea95eaf6421ad31b5dda8584104b67da223e6aaf97f7a187d7d474672fc28a668747e9ba0cef2aa51e370a62aa4cd3a
SSDEEP

192:9eaWF6AiFh/YfeAQZOJ0mduXMKC9flqbNQ/W1mBv+utylwFMveDGP1oynAo:whi70rUYrKC9flWNQ+4Rz0aFxk1K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd7c74572315e3e3f1d5c271ca59fbc9_JaffaCakes118

Files

dd7c74572315e3e3f1d5c271ca59fbc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38ede5737c14864b5b881f49a08664ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
GetSystemDirectoryA
WinExec
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA

user32

DispatchMessageA
PostMessageA
DefWindowProcA
CreateWindowExA
ShowWindow
GetMessageA
RegisterClassExA
TranslateMessage

msvcrt

strchr
_controlfp
_except_handler3
__set_app_type
??3@YAXPAX@Z
??2@YAPAXI@Z
atol
sprintf
srand
__p__fmode
rand
fwrite
fclose
fopen
__CxxFrameHandler
time
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE