e00b78da7ce3fe28cde52908efcc35bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e00b78da7ce3fe28cde52908efcc35bf_JaffaCakes118
Size

94KB
MD5

e00b78da7ce3fe28cde52908efcc35bf
SHA1

fc123c9e806c9ea0ad8e7b9b50433b1794b935b6
SHA256

418bc308f50b980f63a236e6e89c35010a6d5eb554f60a385e54dcfda93a4691
SHA512

6f9d9df7a9da694fbcc2798ccb0eb52bc74452f5a511935accf1d56aa5eafeb2c87997c458601691c8323ae90044380975f1389a96249ccf736c12f8ea5cdf8a
SSDEEP

1536:dwyQPx0Lgcv1ZYk9H38afCiGIUsxtlGN2Loc+Wbf6RUxNNZe8cexAin/s:dVQZ4yLafFGt2LoJWr6RU7NZe8cexAi0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e00b78da7ce3fe28cde52908efcc35bf_JaffaCakes118

Files

e00b78da7ce3fe28cde52908efcc35bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45857c78f3fed774ab508c015b1010c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CloseHandle
CreateFileA
LoadResource
GetTempPathA
GetCurrentThreadId
FreeLibrary
OutputDebugStringA
GetPrivateProfileStringA
LoadLibraryA
GetProcAddress
GetTickCount

user32

GetMessageA
PostThreadMessageA
GetInputState
wsprintfA

shlwapi

PathFileExistsA

msvcrt

_XcptFilter
_controlfp
__set_app_type
__p__fmode
_except_handler3
sprintf
memset
strcat
strcpy
_exit
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ