0f35651cb327c3d5dc8f325c6e77525d_JaffaCakes118 | Triage

Sharing

General

Target

0f35651cb327c3d5dc8f325c6e77525d_JaffaCakes118
Size

156KB
MD5

0f35651cb327c3d5dc8f325c6e77525d
SHA1

b09aebdffb01320c9b96e2c45c4dc7ecbb639e65
SHA256

104adeef5176f4bc1c617d2a0ed7d5cf27d5216723e7c5c741ad911394f2f311
SHA512

742b4482ae63d755b49e520fe1c565b3070b4db51d90d42e74cb9b1c1fd79f077e92999d855e2e7c9dcb7d3a21206a448d9a8e7398e214fe1f3bd44c861d3990
SSDEEP

3072:NX81qYLx6Vla6+SOmKS+a/e9f4WQ/qWJEVCR+8bc/bgLJvCTEVAQ47DAE1/P1/3:J8Roa6+SOmKS+a/e9AWQ/qhS+8bEAC4G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f35651cb327c3d5dc8f325c6e77525d_JaffaCakes118

Files

0f35651cb327c3d5dc8f325c6e77525d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0bfdce151464eade4e95c612e39cf1c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
SetEndOfFile
WriteFile
SetFilePointer
GlobalFree
ReadFile
GlobalAlloc
CloseHandle
GetFileSize
CreateFileA
GetProcAddress
GetModuleHandleA
GetLastError
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

GetActiveWindow
MessageBoxA

msvcrt

__getmainargs
printf
sprintf
memmove
malloc
??2@YAPAXI@Z
strncpy
_exit
_XcptFilter
exit
_acmdln
??3@YAXPAX@Z
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ