5747db92b5f7788e83cfd50295335562_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5747db92b5f7788e83cfd50295335562_JaffaCakes118
Size

17KB
MD5

5747db92b5f7788e83cfd50295335562
SHA1

1ee2b0ff9c78742fca9387b27a2a1174a468082d
SHA256

ef69b85d030354fe0b3c1607c62ee4cb04644cc344814d8f74dd215cdd3f9025
SHA512

f6664274f03f65a7443038392d7ac1436ae734a2f6031299baf5003d136cd83eb292c3699c7a97393df2155fece7d4bab2f5644787703dfe285a27ef8dd85eb0
SSDEEP

384:DGQAxA2fwfjA8QJkbpe8IfzWXd9udltiQfPdIQqDdmwCMaWawFJqV1e1JUAWZXQp:DGQAxA2fwfZQJkbpe8ILWXd9udHiQfPy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5747db92b5f7788e83cfd50295335562_JaffaCakes118

Files

5747db92b5f7788e83cfd50295335562_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5afe66db864264192095e426e15daa4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp71

?_Nomemory@std@@YAXXZ

msvcr71

strtok
strcpy
??3@YAXPAX@Z
strncpy
strstr
memcpy
strcmp
strchr
_except_handler3
malloc
_callnewh
__dllonexit
_vsnprintf
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
rand
strlen
exit
strcat
__CxxFrameHandler
srand
sprintf
memset
_onexit

kernel32

GetModuleHandleA
GetStartupInfoA
LoadLibraryA
GetProcAddress
ExitProcess
Sleep
lstrcmpiA
GetTickCount

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ