4b0706e43746be1057300e0538068192_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b0706e43746be1057300e0538068192_JaffaCakes118
Size

30KB
MD5

4b0706e43746be1057300e0538068192
SHA1

4abf5537855ac0ba1f635aafdb3beb45eb1bf139
SHA256

34786d57fbfd72424ed8736e46af4df9c3160ec3f7f40ac171263cb43a500607
SHA512

dd62ed5f7d15c45ada9db918535dd5a5a7c76cbe415cdbbaa2412829aae67815395c9d9ae3bf422b10657a96c3b206118d12cff670af50bb8a38089c29505ab6
SSDEEP

384:4T1DphYcw/Pb1DxA0GlZw9k9vHn/sGCmnn//0V9RMS4oPhRYaTRUsEfnB:i1DjYNpDe0GlS9k9v0hMn3U9aYHEf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b0706e43746be1057300e0538068192_JaffaCakes118

Files

4b0706e43746be1057300e0538068192_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17a2446bacd595182f178ac0a4964c7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
sprintf
getenv
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
??2@YAPAXI@Z
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
atoi
_except_handler3
_ftime
strlen
_initterm
srand

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
Sleep
GetStartupInfoA

user32

DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
DefWindowProcA
PostQuitMessage

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE