f31012e9e8abcc1fe9fbca7793cd5bca_JaffaCakes118 | Triage

Sharing

General

Target

f31012e9e8abcc1fe9fbca7793cd5bca_JaffaCakes118
Size

48KB
MD5

f31012e9e8abcc1fe9fbca7793cd5bca
SHA1

b01f37b74091471c122629d0fab9974c9f4cbd0e
SHA256

e54e2ac68c7c768adc7f6983077eb8bc726dfd1bd4d199b837d9045149e5e5d3
SHA512

99ce5e280f58e0cfc751de1ceef4b593075fdb49f555fa43dc7967c0beb5279ca080a2317ca75e05b588ffd0bb5a7f8a054c216fe94e3e93f60a333937e228e2
SSDEEP

768:HH6dykGqus1a7wECWxBGOJY140EvvxK/N:nYG3s1aqWxBGOJY60EvvxK1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f31012e9e8abcc1fe9fbca7793cd5bca_JaffaCakes118

Files

f31012e9e8abcc1fe9fbca7793cd5bca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7735534e507e19fc9d59d5ca370ef37b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetProcAddress
GetModuleHandleA
GetLastError
LockResource
LoadResource
SizeofResource
FindResourceA
LocalAlloc
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

__getmainargs
??3@YAXPAX@Z
printf
sprintf
memmove
??2@YAPAXI@Z
strncpy
_exit
_XcptFilter
exit
_acmdln
malloc
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ