fd25ef14179cbc3980cf8c6e23654ab6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd25ef14179cbc3980cf8c6e23654ab6_JaffaCakes118
Size

24KB
MD5

fd25ef14179cbc3980cf8c6e23654ab6
SHA1

d2c75e7265dca1804eb4fa93ae62176739e78d16
SHA256

6edf2f97b4114ff9b556ccaf175d63ee5371af08320b3841debf6f0cf53756c7
SHA512

25bfebc587b8ec71fd425953a9b0b721d8f4da758c2bb101577b6168e9539fa12cecdf3c5ec3ad37b684ee7b23d75a69419b30a4683a3ea17f6aa27b631d6d75
SSDEEP

192:IvyWiaQje0vLI7WYLJTk866V/rM4v1jXGP1oymrMKQ9Z1:IvWzjt4WYLJg866V/Z9c1MrM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd25ef14179cbc3980cf8c6e23654ab6_JaffaCakes118

Files

fd25ef14179cbc3980cf8c6e23654ab6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27e9492aea6df58a37531ea9fd73ac98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameA
GetTempPathA
GetProcAddress
LoadLibraryA
CloseHandle
CreateProcessA
FreeLibrary
WriteFile
CreateFileA
GetModuleHandleA
GetStartupInfoA

msvcrt

isspace
ispunct
isprint
islower
isgraph
isdigit
isalpha
isalnum
div
ceil
atoi
??3@YAXPAX@Z
isupper
rand
srand
time
__CxxFrameHandler
atol
_except_handler3
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
isxdigit
sprintf
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ