13ebe9ba62b79c39dcd3f498e0d904a6_JaffaCakes118 | Triage

Sharing

General

Target

13ebe9ba62b79c39dcd3f498e0d904a6_JaffaCakes118
Size

12KB
MD5

13ebe9ba62b79c39dcd3f498e0d904a6
SHA1

3670c54984f4eb5e86d0831eb2e2b21de08486d9
SHA256

eda2ecb3bcec9cf731ce20c97b5d7a4a7b15644ef67ea30fd9f6b0e3b8f985ce
SHA512

2d6e4de7617d8a6e08473f459fb88f74be0b4eb05a1407f0305d6ceabd8dd5e691616157bb71527bad0ab4b5391f160565f1da80ab66386a9457fd6b0b51f376
SSDEEP

192:uVEBisLXYu20kaTt8M/OfTmkGpkzkaWvkTB7Q9Lqq5AqHWW7/P1oyS60hQDit5o:1rLZxkaTtICQkaXVQ8qKqHWmH1s6wRHo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13ebe9ba62b79c39dcd3f498e0d904a6_JaffaCakes118

Files

13ebe9ba62b79c39dcd3f498e0d904a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0645e269549909d129f25bd703950042

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrcatA
FreeLibrary
CloseHandle
Process32Next
lstrcmpiA
Process32First
DeleteFileA
MoveFileA
LocalFileTimeToFileTime
FindFirstFileA
CreateFileA
GetTickCount
ReadFile
SetFilePointer
GetLocalTime
ReleaseMutex
GetLastError
CreateMutexA
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA
GetModuleHandleA

msvcrt

strlen
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memset
strchr
_except_handler3
_strcmpi
_strrev

Exports

Exports

go
heart

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ