14dd17a4b1aca889842ed37be5a15b0f_JaffaCakes118 | Triage

Sharing

General

Target

14dd17a4b1aca889842ed37be5a15b0f_JaffaCakes118
Size

82KB
MD5

14dd17a4b1aca889842ed37be5a15b0f
SHA1

c25617bf3aef52e603b0e13966629ecb9a5cf9f8
SHA256

1a53d445ff17a7db7a99ac6f785b8080b5d2fd4851274d55c9e7086db7ba3f06
SHA512

d3058b3aeb7265408760dcd44f2b6efd88b77fa4b658cb2531a37b6d452fa221883096f632af4762c5fa80f189b5a1e62b4814a4cf0aa4765ba599a94e0f2e76
SSDEEP

1536:ciUy0FjxbjO3B2Bl1i0LOm6PDX7RWU94DIFoASooePwwH3ZE8qgZlepiHFJi:Uj83Wu5/wU94DIFoA1PwwHJE81spiHFQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14dd17a4b1aca889842ed37be5a15b0f_JaffaCakes118

Files

14dd17a4b1aca889842ed37be5a15b0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d860f34891a408206f0700aa4a6dcaf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetCommandLineA
GetModuleFileNameA
lstrlenA
GetModuleHandleA
GetLastError
GetEnvironmentVariableA
lstrcpyA
GetStartupInfoA

user32

DialogBoxParamA

msvcrt

_acmdln
memset
isprint
isspace
strlen
islower
isupper
isalnum
malloc
free
_exit
_XcptFilter
exit
memcpy
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ