356495cdb91d1b39bfa4399fc7ca358b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

356495cdb91d1b39bfa4399fc7ca358b_JaffaCakes118
Size

95KB
MD5

356495cdb91d1b39bfa4399fc7ca358b
SHA1

0eade87af46b59f49eabfc1bb47840db518acce6
SHA256

51426e65eececa2038985e1f5d1194b933a636f2885ee659bcd2913d12e7bc09
SHA512

2bc9f39ec377003a94d851a7cf4cd0e3057a26454ee9105e88b588d3f3134ad83ec65d81041579c39495dfc187c66876a0a37caaf51c3db2e2f9747919ebdd8b
SSDEEP

1536:qkuyXytTuefUEsNZ2Rq5hIzFeEds8wQN9DIS959ygEOpUY2cf:qLyXysefUN2cj8fIq59ygEOpUY2cf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
356495cdb91d1b39bfa4399fc7ca358b_JaffaCakes118

Files

356495cdb91d1b39bfa4399fc7ca358b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c7cc7106b08e873d9280c1d1b777757

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
GetWindowsDirectoryA
GetTempPathA
LoadResource
GetLastError
GetEnvironmentVariableA
lstrcpynA
LockResource
GetSystemDirectoryA
GetCurrentDirectoryA
lstrcpyA
GetCommandLineA
GetStartupInfoA

user32

DialogBoxParamW

msvcrt

_initterm
memset
memcpy
strlen
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
malloc
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ