092ff0c3d01c4bff91708a01f9d160e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

092ff0c3d01c4bff91708a01f9d160e8_JaffaCakes118
Size

1016KB
MD5

092ff0c3d01c4bff91708a01f9d160e8
SHA1

73ffc071bd7494de78e2e32b38f092ce57d5187e
SHA256

5a80238fcc48063b2df48fb2e5eb6c64c20800444381609cdff1fb3057e52201
SHA512

03c357c585fe25b4ea2eef8ff3c2d174c5aca7a74e044932d58b90cae9c24577d98720c5728937553c4de428617ead80343439664de9ef148bf0b6785ad67c2c
SSDEEP

384:5b0znLfDv/jX7PznLf68UnCAwxU6SKbvhsd:5b0znLfDv/jX7PznLf68H9xFSKLG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
092ff0c3d01c4bff91708a01f9d160e8_JaffaCakes118

Files

092ff0c3d01c4bff91708a01f9d160e8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

40e45d9c01b91b93b67ee43c22b1927e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetCommandLineA
GetModuleHandleA
CloseHandle
RtlUnwind
CreateFileA
WriteFile

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
abort
exit
fwrite
raise
signal
strcat
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 36B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 1000KB - Virtual size: 1000KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 744B - Virtual size: 744B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE