4c9854b12d6579e67bd0bae2264388e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c9854b12d6579e67bd0bae2264388e9_JaffaCakes118
Size

148KB
MD5

4c9854b12d6579e67bd0bae2264388e9
SHA1

a9da1b7e2b6b2ee76bfad860bb9a37cd273eab1e
SHA256

6989b9343a6e50dc28ab7ca805ae2521f071ca79f97d5aa3c057a5112ea3c1b7
SHA512

df7f430f26198746eac653287d0c9739cec85cacf1a6c5efcf36f550c8c3cbadf2fd01e6c7448b11530b67f052077ae47c2584db015b90b5210b7e57aa055ea3
SSDEEP

3072:V6mvB75c1VqUIgfWHUDjCxK2PEO+/cjLE9TNP1emd9:8mvbcYifWH02P3FLoNwg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c9854b12d6579e67bd0bae2264388e9_JaffaCakes118

Files

4c9854b12d6579e67bd0bae2264388e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a5abf4a28eaf8092215f546d2824d1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

MessageBoxW

msvcrt

strcmp
memmove
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ