4320cfaf60e0b04fe5525c22c43e5308_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4320cfaf60e0b04fe5525c22c43e5308_JaffaCakes118
Size

19KB
MD5

4320cfaf60e0b04fe5525c22c43e5308
SHA1

3b060cc6cef24802bf4aa29856b48b2d84ceabe0
SHA256

09a0123c614da6d79749f2d04b0dd829015fabb1a962e71aadf53ddf86fa65cc
SHA512

825c8f0bde909746b0e5c990b99b93054a04125bb9f0e8704df629559739004455de6dc66580c7c890da8c1af2f03c8c4cb7675867963ca01ca5300774fbaa5b
SSDEEP

384:y5va7IlSY0GcCbpI8x1QBhPy3I80CwEPNOfuV7VySde8DpOlYJ8sd2wll:yQ7IlSYFcS+g+Py4fENxRTLoMPl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4320cfaf60e0b04fe5525c22c43e5308_JaffaCakes118

Files

4320cfaf60e0b04fe5525c22c43e5308_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb8f88891efff8327eac5efd91ee3022

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetModuleFileNameA
LockResource
CreateFileA
SizeofResource
FindResourceA
WriteFile
OutputDebugStringA
WinExec
Sleep
ExpandEnvironmentStringsA
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
LoadResource
CloseHandle
GetModuleHandleA
GetStartupInfoA

msvcrt

sprintf
strcpy
strcmp
_iob
memcpy
??2@YAPAXI@Z
printf
??3@YAXPAX@Z
rand
srand
malloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strlen
strcat

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ