1b2f9e4c0169edf702c8f2cb22e3d49f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b2f9e4c0169edf702c8f2cb22e3d49f_JaffaCakes118
Size

42KB
MD5

1b2f9e4c0169edf702c8f2cb22e3d49f
SHA1

dc71d05b4f392c0a399f64c80ef0ef5f44d2e339
SHA256

bcadaec35d7c728b03a5966031499f608280cc67a7bf2deddb0e3ace80bdbc68
SHA512

d98d0d98286ef1338decb7c8ec443d64b03bf1fe02c50e03382bb4b674b85a1b972d0c13a5dfd0aa0c3854710e4b5f8f235079529932b57916ef8be81975032a
SSDEEP

768:gbqC0XaTgWNKBknbt5ZQn7GUF3Ho1s11fTaTF01l45u9v9A1a:gOC0XSgWrMSmss1FAyWE9AI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b2f9e4c0169edf702c8f2cb22e3d49f_JaffaCakes118

Files

1b2f9e4c0169edf702c8f2cb22e3d49f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e88f0e8ccd8d511ea7eed8b6ec9e643

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

uniansi

FormatMessageW
GetModuleFileNameW
lstrcpyW
LoadStringW

kernel32

GetUserDefaultLangID
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
lstrlenA
lstrcmpA

user32

MessageBoxW

ole32

CoInitialize
CLSIDFromProgID
CoCreateInstance
CoUninitialize

oleaut32

SysAllocStringLen
SysAllocString
SysFreeString

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
_exit
_acmdln
_XcptFilter

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uistcyi
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE