f864a4a8fda3bddc0929284dfc5861a9_JaffaCakes118 | Triage

Sharing

General

Target

f864a4a8fda3bddc0929284dfc5861a9_JaffaCakes118
Size

102KB
MD5

f864a4a8fda3bddc0929284dfc5861a9
SHA1

56ae13073ba344318e9ef7bfafa3e054da76eb61
SHA256

7dd04f80e11955a8c8082ee3c0cd284e20174898e31488c8955db354cebe5276
SHA512

1db19d146e1a682ad689fd6be630ff40152fd344eacdb4fdb12ef8be637a8b4cd54397e1cc8607187f3e6a98c052e10624e36bbe5b45f78b1a41875a0b97345b
SSDEEP

3072:X1LtCTGKRYzaFNp2xWYRXZN3P9sjy0Q/qsdmg:X1LtCTGKRY2FNpWWYXNajV9g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f864a4a8fda3bddc0929284dfc5861a9_JaffaCakes118

Files

f864a4a8fda3bddc0929284dfc5861a9_JaffaCakes118
.exe windows:1 windows x86 arch:x86

246667c7894354b09bdd4b0924ff921a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_strnicmp
abort
exit
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strtol
wcslen
wctomb

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 608B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 760B - Virtual size: 760B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE