49951b62a7db4d17a0160ee034c9f922_JaffaCakes118 | Triage

Sharing

General

Target

49951b62a7db4d17a0160ee034c9f922_JaffaCakes118
Size

93KB
MD5

49951b62a7db4d17a0160ee034c9f922
SHA1

f0afbea5c5b1856e12662381423f440b86c393c1
SHA256

b79afc7b461d3837e6d2db1a603698959cd8dd5a2fc95272061b4043700fe5ab
SHA512

ab59ddbc3ed5cd25d171127183f1e6c2d6c50f125005c3cd83bead818e1700d602444cc4e50c3809eebfc35d67316c5fedfd8a2f1df9d0376e4fc5b318bad154
SSDEEP

1536:L+NwArRtVhYf/rC/8Wm0OthH4WB+a6X5AwCva0+5LXS7urT3iGL5z9mZnh:iNwKRWf/XWmXt6RhC5+VSir2ugZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49951b62a7db4d17a0160ee034c9f922_JaffaCakes118

Files

49951b62a7db4d17a0160ee034c9f922_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3f60d8134fa049b58a838ab168cb9f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetModuleFileNameA
lstrcpynA
lstrcpyA
GetCommandLineA
GetCurrentDirectoryA
LoadLibraryA
GetSystemDirectoryA
lstrlenA
lstrcatA
GetStartupInfoA

user32

CharLowerA
CharUpperA
DialogBoxParamA

msvcrt

_exit
islower
malloc
strcmp
strcpy
isupper
strchr
isalnum
free
_controlfp
memset
memcpy
strlen
strcat
isprint
isspace
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ