1045bd40ee73a11f64fd74f4b8c12d3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1045bd40ee73a11f64fd74f4b8c12d3a_JaffaCakes118
Size

192KB
MD5

1045bd40ee73a11f64fd74f4b8c12d3a
SHA1

179a580346c48caa4c220e92ac30ca87bfd2cffa
SHA256

653bb0c39a95ef0fbc36fa6095f9a042d4c4e84cdd7e8bdde94fa48983a04b4a
SHA512

aca7e927da7e0f48ca4ca8ee53ce2ff32f1951477ea4a0eb5a57edc4c97b4e109ab80601079c507bd44536cb4542322fb5ea6da2373a852f06f82b01a4920c3c
SSDEEP

3072:Aw91T5MZs8j+XFi3h1zaqi3uO/hQJ7PyHZ9/KAULQU:dUsq+X03hxNkuEhQJ7yX/Pg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1045bd40ee73a11f64fd74f4b8c12d3a_JaffaCakes118

Files

1045bd40ee73a11f64fd74f4b8c12d3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4891e65b4520cccba8a8074ff50c5f4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
OpenMutexA
CreateProcessA
GetProcAddress
GetModuleHandleA
lstrcmpA
GetStartupInfoA

user32

CreateWindowExA

msvcrt

_exit
memcpy
rand
strcpy
malloc
strlen
memset
srand
time
atol
printf
tan
sin
_ftol
free
cos
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ