4277da0faaa467337b22d9440a88722b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4277da0faaa467337b22d9440a88722b_JaffaCakes118
Size

93KB
MD5

4277da0faaa467337b22d9440a88722b
SHA1

0072874a7fe6f8f629f773b0bbe44b65af1c71b1
SHA256

394c6062276c12e7a5ce8385d775d17675b18513f48d3e5f97bb7caa082efe2f
SHA512

e7822a93a1f6c19088c598990ef0bd37de7192509e9f9a8b06290d644569849b712baf7d6dcafda0371c73f77a2ddd7807036f57828650c1d1f98a4a83c196cc
SSDEEP

768:q3fLHq+v4tiiiii5vWMoZ/56lVbYuGGaql3ti7sHMTtNIBQJbvRJcvnyNQC+NaHK:uLHvv4a3pfYRPi6isKldN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4277da0faaa467337b22d9440a88722b_JaffaCakes118

Files

4277da0faaa467337b22d9440a88722b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc60a920495dd603b6329f9f82fb28de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\Acro_root_apms\build\Release-results\info\template.pdb

Imports

kernel32

GetModuleFileNameW
GetProcAddress
LoadLibraryW
HeapFree
GetFileAttributesW
HeapAlloc
GetProcessHeap
GetCommandLineW
SetStdHandle
ExitProcess
CreateFileW
GetModuleHandleW

shell32

CommandLineToArgvW

msi

ord173
ord205

user32

MessageBoxW

shlwapi

AssocQueryStringW
StrCmpW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE