880b6fc834ae64431a24696344421377_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

880b6fc834ae64431a24696344421377_JaffaCakes118
Size

394KB
MD5

880b6fc834ae64431a24696344421377
SHA1

ce9bfc56ef852632e5a3a24f983469976e6d40e6
SHA256

46ef5d74124113983316eb01bdb8bd7a61b9e391a2edce81287c690270f3f391
SHA512

fa3185c45dd33b55059457ca8ad2909332b067cacd4b4e4874319ca1424a73b502834a6c521987472637fd85b9578ee8c6c109211380052773c4fe220409a1aa
SSDEEP

12288:cHt6ICnIiJD6v/FrQQ1OKbYeAOO34pFgd3/nNSW97dIZ:EtjCIiN+OQ1O9L/nNSAO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
880b6fc834ae64431a24696344421377_JaffaCakes118

Files

880b6fc834ae64431a24696344421377_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68f4bd3f55b0aecfb31bccf206f5db25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
LoadLibraryA
CloseHandle
VirtualAlloc
Sleep
lstrcatA
lstrcpynA
OutputDebugStringA
lstrcpyA
GetBinaryTypeA
SetLastError
GetCPInfo
GetModuleHandleA
GetCommandLineA
UnlockFile
ExitProcess
LockFile
CreateFileA
GetACP
GetLastError
FreeConsole

user32

MessageBoxA
KillTimer
CreateMenu
SetTimer
GetProcessWindowStation
GetParent

gdi32

DeleteObject
CreateCompatibleDC

comdlg32

ChooseFontA

ole32

CoInitialize

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 938B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ