772251e9d6e1230949de64017f848126_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

772251e9d6e1230949de64017f848126_JaffaCakes118
Size

41KB
MD5

772251e9d6e1230949de64017f848126
SHA1

ba68a5e27cb5d3de8ae4c05ee561279b436062d4
SHA256

8cd9f67ff13fcbdee4e732d13d78b2cd55d555b9812b1a0f7f3952524ac86276
SHA512

0c1671daa871be1c8c45883f6f47c7e42600353234313020b4a7b33bfa97599652d95a06c461f659f1004caab67a2b5455512097ba73aa8c35e22799c1ac46eb
SSDEEP

768:kaYsJ2L6ibqWVa59KJ9EO0aztjz9gBHSu4MTWkGGHL+Sv3sBC56R27T11Yeaz8:kAO6ibqJWCatQSWTWkdr+XBC56m1Wz8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
772251e9d6e1230949de64017f848126_JaffaCakes118

Files

772251e9d6e1230949de64017f848126_JaffaCakes118
.exe windows:4 windows x86 arch:x86

802f04b44f254a769cdd585d85988dd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_controlfp
memmove
malloc
sprintf
getenv
??2@YAPAXI@Z
_adjust_fdiv
_except_handler3

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
CreateThread
Sleep
GetStartupInfoA

user32

MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ