1507dca912f264b88359d29838c5e9b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1507dca912f264b88359d29838c5e9b9_JaffaCakes118
Size

315KB
MD5

1507dca912f264b88359d29838c5e9b9
SHA1

a2077a90c0d54a180e88185866ba9afe7c189f93
SHA256

c239d49e4ff0784fa15a7ebe38e44c1d1868c06a8e8513ae74e7439091ddd592
SHA512

49c639b390266a5e523a1ad8d9ff8543324252f91d98270a8c31037324139dc9a4bb3dad6de803c7418307c4110aa2c45f3d9df725df758089caa8ef319c9562
SSDEEP

6144:x394tHSXcUud3DEZrLe94tHSXcUud3DEZr:xjVkDKrLyVkDKr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1507dca912f264b88359d29838c5e9b9_JaffaCakes118

Files

1507dca912f264b88359d29838c5e9b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ee426285c0583a6046162c0acf9fa4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateThread
GetProcAddress
LoadLibraryA
GetTimeFormatA
GetModuleHandleA
GetStartupInfoA

user32

DispatchMessageA
PostQuitMessage
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
MessageBoxA
TranslateMessage

msvcrt

_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
strlen
??2@YAPAXI@Z
memcpy
sprintf
__setusermatherr
memset
memmove
atoi
getenv
_XcptFilter
exit
_acmdln
__getmainargs
_initterm

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 299KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ