edf12fecd5eae357d0b1ad580b699620_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edf12fecd5eae357d0b1ad580b699620_JaffaCakes118
Size

68KB
MD5

edf12fecd5eae357d0b1ad580b699620
SHA1

9b734f80388cd7763c431f592b899c77d6bb90d9
SHA256

53e5da70a3dbb1b8b044b2e43ad0bce9c328e34e4ecdb4e979d7b1db4d3f07d2
SHA512

84ee4c3680e32627883e9a1e17c4d82881aa7fd8d0a1df44941d82ab719296350af02df916d623bc9c1ec2188e856d13892a81f09907745209286c49744cb541
SSDEEP

1536:Y1PUl5I8GHwunmG6A6rMjhMKbssfTHISoMuOUcQL7bvP:q8rGVttgsfB9ui6vn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edf12fecd5eae357d0b1ad580b699620_JaffaCakes118

Files

edf12fecd5eae357d0b1ad580b699620_JaffaCakes118
.exe windows:4 windows x86 arch:x86

add83d68b79498513ce30e6fd986f72b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetModuleFileNameA
GetTempPathA
lstrcpynA
LoadResource
GetLastError
lstrcpyA
lstrcatA
LockResource
GetSystemDirectoryA
GetCommandLineA
GetEnvironmentVariableA
GetWindowsDirectoryA
GetStartupInfoA

user32

DialogBoxParamW

msvcrt

__getmainargs
memset
strcmp
strcpy
strlen
strcat
memcpy
free
_exit
_XcptFilter
exit
_acmdln
malloc
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ