075770566d73923a2c20480ce2bf5b03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

075770566d73923a2c20480ce2bf5b03_JaffaCakes118
Size

136KB
MD5

075770566d73923a2c20480ce2bf5b03
SHA1

79f1fda3f9802eecaf43fe995fb87da86a5ff8bd
SHA256

1c7a3b3e430110208cd4849df4d0d9def3fff45e9717c86eccfe087c6580f9af
SHA512

f8399d97fd26c7c5227a786fa11e398830cd34d84b100f985984581a1de6fbeaf143c7b6f9804ac33c928bab5051ce0c89d9f08056912f3c2bc54ffdeb2bd988
SSDEEP

3072:9M16qxU3x1whM2dw4ulG8hM7IvBf7cDqx/gDGXf6s:9M1TwFlGyM7GBDcmJgOf6s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
075770566d73923a2c20480ce2bf5b03_JaffaCakes118

Files

075770566d73923a2c20480ce2bf5b03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

332a76fdab61c9a7b0a170f32cd59c60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetLastError
LockResource
LoadResource
SizeofResource
FindResourceA
LocalAlloc
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

_initterm
??3@YAXPAX@Z
printf
sprintf
memmove
_exit
_XcptFilter
exit
_acmdln
__getmainargs
malloc
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE