07de35f662c8bfe814af3e27b4516cbe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07de35f662c8bfe814af3e27b4516cbe_JaffaCakes118
Size

28KB
MD5

07de35f662c8bfe814af3e27b4516cbe
SHA1

481e7ce9f7886edcdd1fad035a8ad578f8e13a84
SHA256

05d221085f71ef58d6f8583a02ccd578804754bcd696820c058e6984c2f06d5f
SHA512

5dba517218060cb0a82c4d146abac00f121674f6745c65e43314becfa30d49d06b2ef40b61fbd199a91cc02b77d1cf4385d87422efe127fe81f8483e966e32ca
SSDEEP

768:DzAtIp9Ufycf2EUkGJWwLbrkZ73GpHV4:DEe9/JWwPrkx2pHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07de35f662c8bfe814af3e27b4516cbe_JaffaCakes118

Files

07de35f662c8bfe814af3e27b4516cbe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47b1ae8d9a99dfd3b40cca3b0e498d47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetLastError
CloseHandle
CreateMutexA
SetLastError
GetModuleHandleA
LoadLibraryA
GetProcAddress
lstrcpynA
GetStartupInfoA

msvcrt

strchr
strncpy
strcmp
atoi
free
calloc
_vsnprintf
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strstr
rand
time
srand
malloc
memset
strlen
_snprintf
_XcptFilter

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE