738d23ddaced3e47d98267da02c20cb7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

738d23ddaced3e47d98267da02c20cb7_JaffaCakes118
Size

52KB
MD5

738d23ddaced3e47d98267da02c20cb7
SHA1

78a44610d621fa3f3957cf8ee4e9615a848eff37
SHA256

0390c3c754f0f0cecd48a497c5e091a37e77ec9b6e030adec11af1c829625ac8
SHA512

c38abeb42acbfc47b1bfec8b83c8d082aea91683b02f5aefe8d35f8d972e83f9c622d21ace2f350e7876aad8a835dcafd5f89111ad7d9ce8714123e69eb6b419
SSDEEP

768:fH6dykGqus1a7wECWxnYIMa6AUA2Ui+lannM:/YG3s1aqWxYIO3HUfR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
738d23ddaced3e47d98267da02c20cb7_JaffaCakes118

Files

738d23ddaced3e47d98267da02c20cb7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7735534e507e19fc9d59d5ca370ef37b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetProcAddress
GetModuleHandleA
GetLastError
LockResource
LoadResource
SizeofResource
FindResourceA
LocalAlloc
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

__getmainargs
??3@YAXPAX@Z
printf
sprintf
memmove
??2@YAPAXI@Z
strncpy
_exit
_XcptFilter
exit
_acmdln
malloc
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE