2272725ba8d7a857bb8600423b190eae_JaffaCakes118 | Triage

Sharing

General

Target

2272725ba8d7a857bb8600423b190eae_JaffaCakes118
Size

83KB
MD5

2272725ba8d7a857bb8600423b190eae
SHA1

f34d166a78959b122d8a1da9edbd5c7c0be5bc92
SHA256

bc8b29f27771d4f8c16ce6e81b180ca85627b7b6217a7ee5560679317c772ce9
SHA512

c1191b3d9842007cb642239dd8a2ea5c1b7235293adaa5297f7b29af5275605735f883e8f797c1492e44d60391f6214f91455a62460f7de75e333be28bff2a04
SSDEEP

1536:lFwaN6Q110kgWHrGK04QvY/T7VmFHlbHKoGoLi8Qx:DNUQJgWLGumYnoGoLi84

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2272725ba8d7a857bb8600423b190eae_JaffaCakes118

Files

2272725ba8d7a857bb8600423b190eae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

049f442ab1d5a967fbe461eb8a1fffc1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
FindResourceW
lstrcpyA
GetLastError
GetCommandLineA
lstrlenA
GetEnvironmentVariableA
GetCurrentDirectoryA
GetWindowsDirectoryA
GetStartupInfoA

user32

DialogBoxParamW

msvcrt

_initterm
memset
memcpy
strlen
malloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
free
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ