69bb475a47037fabfabc17df451b90c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69bb475a47037fabfabc17df451b90c7_JaffaCakes118
Size

36KB
MD5

69bb475a47037fabfabc17df451b90c7
SHA1

03af6cc84b16f2554d9c8476a8bbbb0ecbfff2be
SHA256

e4b7d2f57f849837869f6242c5e727e72c1f54febef8d32636105278be4d674d
SHA512

072f00d4534ad604643127ecefb46f1f5a58f960b8021b4f6a63fc10a7e917f17670e6301cb99d41295d0c09c7d97645a506a9957df8b82edb6532b6a22ae264
SSDEEP

384:M8R1IjjHhCj1xCNEoasdEpnyuTqKhshhcLpwcWhJmd2:H1IjjFNr0hyu2KhshhwOnhJS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69bb475a47037fabfabc17df451b90c7_JaffaCakes118

Files

69bb475a47037fabfabc17df451b90c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a393ab1e0601f47af36ca291d3aa2a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
MessageBoxIndirectA

msvcr71

__p__commode
__p__fmode
_adjust_fdiv
_stricmp
_onexit
_controlfp
__setusermatherr
_initterm
__getmainargs
_amsg_exit
__p___initenv
_cexit
_XcptFilter
_exit
_c_exit
atoi
sscanf
strstr
printf
exit
strcat
strlen
strchr
memcpy
_except_handler3
memset
__set_app_type
__dllonexit

kernel32

GetVersion
GetModuleHandleA
CreateProcessA
GetLastError
OpenProcess
CreateRemoteThread
ResumeThread
WaitForSingleObject
GetModuleFileNameA
GetCurrentThreadId
GetCurrentProcessId
ExitProcess
IsBadReadPtr
VirtualProtect
VirtualProtectEx
WriteProcessMemory
ReadProcessMemory
VirtualFreeEx
VirtualAllocEx
GetCurrentProcess
LoadLibraryA
GetProcAddress
GetCommandLineA

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE