JaffaCakes118_7cfa2de35cde3ffac713b73f31525d90 | Triage

Sharing

General

Target

JaffaCakes118_7cfa2de35cde3ffac713b73f31525d90
Size

70KB
MD5

7cfa2de35cde3ffac713b73f31525d90
SHA1

76ce1a5a3149deee9c8591b017eeeff37ae32698
SHA256

aadc064c1d5de9341b5befd9d9604f2ae33843df1b9a6865f2a7b7b26b9f3c6e
SHA512

32fc8e8e7b595aef38ea9e63917f44b7680699f18e144fda94e586faf1692a3fdaae8d60a0757ceb7a316e6a561979a99c1d2c004a3cc953052c2946a224b722
SSDEEP

1536:nd/ZY7FO7VTszYjw60LeRQQw7A6W0NfLYgShEfb1f9+Ec:AFO7VwUc60CRK1Ohm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7cfa2de35cde3ffac713b73f31525d90

Files

JaffaCakes118_7cfa2de35cde3ffac713b73f31525d90
.exe windows:1 windows x86 arch:x86

bd58dbb13ca477179c96f5f7514582c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringA

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
SetLastError
GetModuleHandleW
lstrcpyW
lstrcmpW
lstrcatW
lstrcmpiW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
lstrlenW
ReadFile
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte

crtdll

__GetMainArgs
exit
raise
signal

framedyn

?GetData@CHString@@IBEPAUCHStringData@@XZ

user32

LoadStringW
wsprintfW

ole32

CoCreateInstance

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 250B - Virtual size: 250B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ