46850df5d788abfbcda14c7cd2cb265a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46850df5d788abfbcda14c7cd2cb265a_JaffaCakes118
Size

470KB
MD5

46850df5d788abfbcda14c7cd2cb265a
SHA1

1a8e2ae2b15b102b437f3f76ef2dcf776a889e33
SHA256

294ff7f8371c3f6b3ba185b575169a8438af4cee065b3bdbc324547fe2deea5e
SHA512

b9d543e0a7ea9408430c4fffcc7b7d582d52be61c9e1eda8f131942b7a179131df21a61d65a1a0d54b76bef044933fd0cc4a0826241bd43dcc4ef87e7de6016a
SSDEEP

12288:PAON8WOkrnt3S8FoVXp7CN0TcZKjjpXrMiTnD9K5URp5mib5avd26U6:PAGOK3SZVbYZKj1rhTnYYHg5U6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46850df5d788abfbcda14c7cd2cb265a_JaffaCakes118

Files

46850df5d788abfbcda14c7cd2cb265a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7bf66225278bd44cf50b2e63010cd2d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

atoi
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
memmove
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
getenv
sprintf
memcpy
??2@YAPAXI@Z
_adjust_fdiv
strlen

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
CreateThread
Sleep
GetStartupInfoA

user32

MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 463KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ