74f0c8c60a94f3b14fa9b2f851508930_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74f0c8c60a94f3b14fa9b2f851508930_JaffaCakes118
Size

36KB
MD5

74f0c8c60a94f3b14fa9b2f851508930
SHA1

eab4d6ad4b651ba1e168360d455e07b1fb392a37
SHA256

703313a745801d9508b457d8bf2a0bca63000e39cef43ac24dfd3b147747e159
SHA512

e9353144f3f6049d9a2efe4fb210206b1ac67ee5f246e57bde61a3f26d52764bf04389daf5f39a733940ee84a16943a33a57e208ddb94337a4f1ce072fc41bb3
SSDEEP

768:miOFJeOb3ucEhy6abVPKo/FZ3YZekn/v1eJ30L/SonysXy9Wau:bO5ucP6abYon3e1e1Gaon3Co

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74f0c8c60a94f3b14fa9b2f851508930_JaffaCakes118

Files

74f0c8c60a94f3b14fa9b2f851508930_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9318c8a64d9d22e8cab44a93e87280ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetProcAddress
CreateThread
Sleep

user32

MessageBoxA
DialogBoxParamA
SendMessageA
SetWindowTextA
EndDialog
CreateWindowExA

comctl32

InitCommonControlsEx

msvcrt

_XcptFilter
_controlfp
memset
strlen
_except_handler3
memcpy
??2@YAPAXI@Z
getenv
__set_app_type
malloc
memmove
_exit
sprintf
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ