0317da5bed0a707176bd0250ac280694_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0317da5bed0a707176bd0250ac280694_JaffaCakes118
Size

175KB
MD5

0317da5bed0a707176bd0250ac280694
SHA1

732ced90b79189b7aeed731991fdd9f98d715fb5
SHA256

e4c34f88fc9337af559b820f52b337863810cfbc558f71d45ef7e8ad39c040ca
SHA512

0b5d444050b31aa33137cd1a8b1181957c0d26e73ae093c08ff62e2cc4782a9a2f7f1ddae1520f4469eaeb14e64d7b131845b1b7969bb685760a28d3f01e74ab
SSDEEP

3072:rjixBsBVh9IK3t7fonL+y4p3hxX4ELJ5hMYIF8dTWWNaVXZnps/:qPsBl1RuG3hNTIUTiXZn8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0317da5bed0a707176bd0250ac280694_JaffaCakes118

Files

0317da5bed0a707176bd0250ac280694_JaffaCakes118
.exe windows:4 windows x86 arch:x86

869db537b56aab660852f8f707c6135b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
CreateFileA
ExitProcess
FindAtomA
GetAtomNameA
GetSystemTime
GetWindowsDirectoryA
ReadFile
SetFilePointer
SetUnhandledExceptionFilter
WriteFile

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
rand
signal
srand
strlen

shell32

ShellExecuteA

user32

wsprintfA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 224B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE