4b1a67cf7c2dbb2d65f01c4647790f60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b1a67cf7c2dbb2d65f01c4647790f60_JaffaCakes118
Size

120KB
MD5

4b1a67cf7c2dbb2d65f01c4647790f60
SHA1

2da9d88c1e463c3bdb0305034ef7b35d241d4d87
SHA256

43ed72b1d64fac5df6f5cf58e90753eefd4649be105547bf9c38ac6c8a017075
SHA512

a65ce9581f173eca4cdd60335fa2f96144606a4fa05b8ff96f42d645954f7205d57a4358763a69704a484bc56486727ae423510399491cf89bd2259ebe317048
SSDEEP

1536:yMUFSFoINm79U4fIAthA081qWMdItmNzxoUpocSYqwT7M91BBZpoumYWlpaW+VU:1DFc24fIALA11qWM6teqg/h7OfTiUq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b1a67cf7c2dbb2d65f01c4647790f60_JaffaCakes118

Files

4b1a67cf7c2dbb2d65f01c4647790f60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b837271a9d1513c6c4fc93ea8f4b43eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetProcAddress
GetModuleHandleA
GetLastError
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

_adjust_fdiv
??2@YAPAXI@Z
strncpy
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 830B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE