34d3142243ef31bc8135fedfcdf66ebd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34d3142243ef31bc8135fedfcdf66ebd_JaffaCakes118
Size

74KB
MD5

34d3142243ef31bc8135fedfcdf66ebd
SHA1

41dbb26b7a72d5b81d8a18305a7cdefd3882c0f6
SHA256

dcca13ad58da10bf670b30f6df1d971d92887896e2801dcb785f285e9e93d49e
SHA512

46658b98478de75191c053ae8c9ed62891cd04072fe078ab553c99a1f629bc9529127a0617e22f9d5f77c19200fb109c68544e32eee27b9135e5d0272a7de533
SSDEEP

1536:COe5J8hs92ji+JBm0V2pHqj5dyf1zaM1mKXIrHxfOB/6jP/qUzESDx:i5J8hM2ji4f2qb41zj1mz5OdwPZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34d3142243ef31bc8135fedfcdf66ebd_JaffaCakes118

Files

34d3142243ef31bc8135fedfcdf66ebd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a94169c7ff96a5754ade8b472a296af3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrcpyA
GetLastError
GetWindowsDirectoryA
GetTempPathA
GetModuleFileNameA
GetCurrentDirectoryA
GetStartupInfoA

user32

DialogBoxParamW

msvcrt

__getmainargs
strcat
memset
memcpy
strchr
strlen
malloc
free
_XcptFilter
exit
_acmdln
_exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 950B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ