1b1c54ae23485d8e33547cb91ccabfa7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b1c54ae23485d8e33547cb91ccabfa7_JaffaCakes118
Size

37KB
MD5

1b1c54ae23485d8e33547cb91ccabfa7
SHA1

188fd75cc353c21f1d0fefe328744aa25eedadf6
SHA256

29532f4dfe03eb4ab7227a93c9aa4535b3b29fe8c8dba7f95b5ae611f07e6ffb
SHA512

8ae3546b73357506ff28d96762ec7b74bc51bfaf357d6f38bf4c3de3b7d761f41fb9cd388215f9c2682acbcba975a93497719bdcdecd41848c01d42e200f6379
SSDEEP

384:iasexgnDLZ17s+NnESUPlPJ2Vew1UdCw3p+NiRJBtNTDVxZ/5aC9O:shr7tRdUMew1GCIlVP/DO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b1c54ae23485d8e33547cb91ccabfa7_JaffaCakes118

Files

1b1c54ae23485d8e33547cb91ccabfa7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39844f815d53892cae74005d195b376c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LocalAlloc
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetLastError
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

__p__commode
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 786B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ