47929403510d1010e06fde8c2834e933_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47929403510d1010e06fde8c2834e933_JaffaCakes118
Size

116KB
MD5

47929403510d1010e06fde8c2834e933
SHA1

9649f3fc2dab7f1be7dcf83fd4931690a2dcf92a
SHA256

783c464fccc6a36355201258d221de976b5b5fea1afa5c35ded064dd0a8157f5
SHA512

ee93a5e4958e47690711759bd02f3ebf4e52c7b18ef2bd75544d469dbaea6f8f22ebc735ec14932822c9114987d2356f89ed44c12b40a1236724f89282045278
SSDEEP

3072:fmXrdv9zrudCP3VeCkYvD5TqmX9nGLoCDo1kdyi6ByL:f2brzP3Vc6EenGMao1c6O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47929403510d1010e06fde8c2834e933_JaffaCakes118

Files

47929403510d1010e06fde8c2834e933_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a084dc5b6f1cf958bc179bcf0ed3942

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CreateFileA
GetProcAddress
GetModuleHandleA
GetLastError
LocalAlloc
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

_adjust_fdiv
??2@YAPAXI@Z
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE