703865c764441f6d53acaf6fce8ca545_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

703865c764441f6d53acaf6fce8ca545_JaffaCakes118
Size

34KB
MD5

703865c764441f6d53acaf6fce8ca545
SHA1

5633dddee5c542eab6298ea9aa54c612f4f94247
SHA256

ba50dd297db7d5600fec7d90d1878fd63d1c0a8f30084962f76c6e0872d75fcc
SHA512

86da270de0be58e8be6242ece7be99936dc01bf88a3bc74d2a24b83e06eab9c36fe670d9f1be1cd3e612c48bf3c91528f557e4d1438e1f55dfef930ffafc9df8
SSDEEP

768:14JVMFAgYQxdAj5EO7+abFsju08oOe3b/VqiMnvJZJ1:19Hjd4EO7HhsjHrg3z1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
703865c764441f6d53acaf6fce8ca545_JaffaCakes118

Files

703865c764441f6d53acaf6fce8ca545_JaffaCakes118
.exe windows:4 windows x86 arch:x86

00171680e8bd2586759d93515288c8d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetCommandLineW
lstrlenW
lstrcmpW
lstrcpyW
GetFileSize
lstrcatW
GetLastError
GetTickCount
CloseHandle

msvcrt

__CxxFrameHandler
_XcptFilter
_exit
memmove
__getmainargs
__set_app_type
wcschr
wcslen
toupper

user32

TranslateMessage
MessageBoxA
GetMessageW
ScreenToClient
GetClientRect

Sections

.text
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ