f5a3be0a5cd3fc2170ec640e29175905_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5a3be0a5cd3fc2170ec640e29175905_JaffaCakes118
Size

128KB
MD5

f5a3be0a5cd3fc2170ec640e29175905
SHA1

67952edae63bf817303c6d1ac5b04b940e9f66ab
SHA256

32366f6de528e0fc7aad6ae12a12c8c77a3e7d260ae11a745c6b96985c6882f1
SHA512

2afa0b817d23e3f06f8bb99b888a90eca988f074b8ece5adaac17ac33a59e8640acc0932e7cec2656521f8cd21e2cf0320cd32f13adf4cc16f567e2a9713283f
SSDEEP

3072:edFi3h1zaqi3uO/ahrqbIraoRNmUvpvgIi1X:y03hxNkuEQrlNfpaX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5a3be0a5cd3fc2170ec640e29175905_JaffaCakes118

Files

f5a3be0a5cd3fc2170ec640e29175905_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d881e6d06d3a5dea50659c510d829ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
OpenMutexA
CreateProcessA
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
GetStartupInfoA

user32

CreateWindowExA

msvcrt

_XcptFilter
memcpy
rand
strcpy
malloc
strlen
cos
srand
time
memset
_ftol
_onexit
printf
free
_exit
atol
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1014B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ