057b1594bfefd63e56456c158cf40810_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

057b1594bfefd63e56456c158cf40810_JaffaCakes118
Size

57KB
MD5

057b1594bfefd63e56456c158cf40810
SHA1

04c31d9e97395ae011f6865555c89c9155fb5d53
SHA256

6e5d12773386c1c92264cf1842c8c38bdef9291d3eef3c6fb76181c9423788c1
SHA512

39543f93a4cced77b6b57db0c2e361e1310310d816cd8229eee1c411f564e58faa74650d4a1a8edf52b7fcc6b0db3f01f803905f70207fef58ed3ad91674c3ac
SSDEEP

1536:N8uS7354LzijGsdu69Ju6jKLgYnTq3L+qpxJP+t3sAO:N8uIyOTBWLgoyjpxJP+5s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
057b1594bfefd63e56456c158cf40810_JaffaCakes118

Files

057b1594bfefd63e56456c158cf40810_JaffaCakes118
.exe windows:1 windows x86 arch:x86

0d0c13680e7925fe1692d5d6f835568b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_stricmp
_strnicmp
toupper
abort
exit
ferror
fgetc
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strcmp
strtol
ungetc
wcslen
wctomb

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 664B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 900B - Virtual size: 900B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE