18564f268fb909787e2195357bb6fb22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18564f268fb909787e2195357bb6fb22_JaffaCakes118
Size

97KB
MD5

18564f268fb909787e2195357bb6fb22
SHA1

22bbc39fb3c03c4336a7ae9e29667acdedffbe56
SHA256

7d55dd5c3aa2ae3d8cf34049b75c562fff3efea9ef3664a47049611ac506dce4
SHA512

4290b92a46c14a8297a6040fbc841e754450e11dd2e7489eff565421a7b36d911be722df74d2891218da0cd56fd5556f0a14d4e44fb64586dbaaccae46923076
SSDEEP

1536:alz9n+roPHmH2c1iZUm6dUxdhNF9jjXTJO/qiVdHGb9s6Zat+UX:Yz9+r8HFc1YUm6OjhNr8yi+n++C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18564f268fb909787e2195357bb6fb22_JaffaCakes118

Files

18564f268fb909787e2195357bb6fb22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

518917709bbf354c1f7ab6eae815eaf1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrcpyA
GetWindowsDirectoryA
LoadResource
GetLastError
GetSystemDirectoryA
LockResource
GetTempPathA
lstrcpynA
GetModuleFileNameA
GetCommandLineA
GetStartupInfoA

user32

DialogBoxParamW

msvcrt

_acmdln
memset
memcpy
strchr
strcmp
strcpy
strcat
free
strlen
_exit
_XcptFilter
exit
malloc
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ