6595bd344061a8a7a519171230ea188c_JaffaCakes118 | Triage

Sharing

General

Target

6595bd344061a8a7a519171230ea188c_JaffaCakes118
Size

852KB
MD5

6595bd344061a8a7a519171230ea188c
SHA1

21c7811819bae824596fe49146347f5e72c57c81
SHA256

b89f0b4195ec7bf3ea07514f2c1ff0a60f9acf355d0dd4c386676bfa365eec44
SHA512

71f1b68a5703bf47af1a4e8967b14a63c0334b4dc3e9a33482253c272aae7bf0d83d59add1938e1f780aea3e7f07a7265deab4a2094853dd35e3346e81fd6367
SSDEEP

12288:vEDX37nDnqZkgua31UwkYZyRCxJhurCpxEyn2aPN41p17ELGpBkU1u9aZ9LCPG:vEfvg1lUwk+y8xJjlnhPWp17ELGhNAG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6595bd344061a8a7a519171230ea188c_JaffaCakes118

Files

6595bd344061a8a7a519171230ea188c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c2e54f490578bec126b636695725ba8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
LockResource
GetLastError
SizeofResource
FindResourceA
GetModuleHandleA
CreateFileA
GetTempPathA
GetStartupInfoA

user32

MessageBoxA

msvcrt

calloc
??3@YAXPAX@Z
_ftol
??2@YAPAXI@Z
_adjust_fdiv
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ