4a0dcfac1beedaf280af698256aa01da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a0dcfac1beedaf280af698256aa01da_JaffaCakes118
Size

386KB
MD5

4a0dcfac1beedaf280af698256aa01da
SHA1

740a97e5cf0c9961d7a47421ee8e7262ecf07502
SHA256

f3ce8448d7a4433f6c06d704ae9b461b44f13ca14b7fc199505ce6c22675b159
SHA512

e83dd543d2c8b734990cbe59145df3b1993d5b89f253b46f0b6d968bcb934416f2349a939a4fc7e5bfea006ee262c42a4b0902c2f327aef928be808494bbecfa
SSDEEP

12288:ZOT2V+q3YrVJCRer4Bp+SmlpN5Hb+2dCQR:ZOTG3abCeqsNtb+2oQR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a0dcfac1beedaf280af698256aa01da_JaffaCakes118

Files

4a0dcfac1beedaf280af698256aa01da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3201205a56a30111410d37d9c12832b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
GetLastError
GetConsoleTitleA
SetLastError

user32

MessageBoxA

msvcrt

_controlfp
strcat
strcmp
strcpy
strlen
strstr
remove
printf
calloc
malloc
sscanf
_errno
strncpy
free
exit
getenv
memset
_getpid
sprintf
fflush
_iob
vsprintf
memcmp
atol
_mkdir
_rmdir
_close
_read
_lseek
_open
_write
_stat
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ