f971ca1eff3e49d371004ff3d9fe9387_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f971ca1eff3e49d371004ff3d9fe9387_JaffaCakes118
Size

58KB
MD5

f971ca1eff3e49d371004ff3d9fe9387
SHA1

2c027ba8d6eeffd5a1984da977941491e649a9f7
SHA256

8324794c35b204249ba7acff2247ea9333bea9b8bd9bf1a2c76a8ce172223d94
SHA512

a5fd0823ad1ca3f1218dd71fcac3afc4f9f08686e3a68ecf4c0f2ffb0e00a47b9b0db8997f3470ebf19c24015fe18fc731e365debd7df345ca21bcbe23ecfbac
SSDEEP

1536:vYopo62E/N4Azsjm9xu6YJu6D0LPJb2whLcq175qtV00i:gYoqtkWAYLPIOh175q2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f971ca1eff3e49d371004ff3d9fe9387_JaffaCakes118

Files

f971ca1eff3e49d371004ff3d9fe9387_JaffaCakes118
.exe windows:1 windows x86 arch:x86

83f4548a89264aee213f0cd93d1e72db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_stricmp
_strnicmp
toupper
abort
exit
ferror
fgetc
fputc
fwrite
getchar
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strcmp
strtol
ungetc
wcslen
wctomb

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 664B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 924B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE