77b1faf4445193861431ebd231775191_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77b1faf4445193861431ebd231775191_JaffaCakes118
Size

60KB
MD5

77b1faf4445193861431ebd231775191
SHA1

f46075b9b2fcc76f7bb8704184ab86c221788e0a
SHA256

29d7bd143fed947094a62e6b2f040cf799643b55a0518eaa75015c6bfcda4906
SHA512

2da5a129d67c239bc46d951d1ad59ea6fa27c7c8f6b176b70b873ab84ee7fb8967c43913da9f7cfe09d3e4ed6b4ce8de291b0ec1dca36bf92054630c62430424
SSDEEP

1536:BnSCjW8vQN4Izxj21Ru6jJu6jD53btY/fTaz/lqTeuVXqZtO3qwvIw6RB:BnSCjZIV1uL5LC/fTqgTeuVXaL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77b1faf4445193861431ebd231775191_JaffaCakes118

Files

77b1faf4445193861431ebd231775191_JaffaCakes118
.exe windows:1 windows x86 arch:x86

a89c30e23f6db560d4a3fd85465f1e2b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_stricmp
_strnicmp
toupper
abort
atoi
exit
fclose
ferror
fgetc
fopen
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strcmp
strncmp
strtol
ungetc
wcslen
wctomb

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 664B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 988B - Virtual size: 988B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE