41716470e20bfe5a001dfc9c512c88e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41716470e20bfe5a001dfc9c512c88e2_JaffaCakes118
Size

60KB
MD5

41716470e20bfe5a001dfc9c512c88e2
SHA1

2a3079365fdd40805a0ee39ef81a7e7cdd953a38
SHA256

4ea75874c1ed31574090081bb02fe2354e98c71f53ea1172ca2c6244d6670c4f
SHA512

1c701a9334645c5df905874e08e34676b602275607c461543a9f8f8bc9bfea3a3719f4b3eb5ba93ff6c43f9a27e612b1c5e9f8044a575e04e2db63f848c5706a
SSDEEP

1536:+fSFINy/NBuo44zijWFxu6NJu6DbLw9lUOrLlq5xAYAifNW:BmNylBBOexPLwkqg5xAYf0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41716470e20bfe5a001dfc9c512c88e2_JaffaCakes118

Files

41716470e20bfe5a001dfc9c512c88e2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

5698b8fa6203bed448a7dd56b76baa1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_stricmp
_strnicmp
toupper
abort
exit
fclose
ferror
fgetc
fopen
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strcmp
strtol
ungetc
wcslen
wctomb

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 992B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 944B - Virtual size: 944B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE