873dbbe16b9a8f3ea4f5719a0dc2377f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

873dbbe16b9a8f3ea4f5719a0dc2377f_JaffaCakes118
Size

32KB
MD5

873dbbe16b9a8f3ea4f5719a0dc2377f
SHA1

20229495945ece183e7efe79bf52a0453e8255e8
SHA256

45e97d24b2650c6126c5394c91a5061a98519883546ba65df82c17a623dc3862
SHA512

026cf0d88d9c066710f3cd05fab4b4fff1f2298eaebb24bf61db41ddaea7c0bbe4ffa00397a64a5ae0530c9b80a14a12ce5ad3a19d6a9593b386e5fc073a0c44
SSDEEP

384:002Qty1jF07uRF+hUQR2241Mhl+CvNJ87Gk2P7FfCgCUQMRh+p:00zQFfNz1Mb+CvNJqCP7lCgCUQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
873dbbe16b9a8f3ea4f5719a0dc2377f_JaffaCakes118

Files

873dbbe16b9a8f3ea4f5719a0dc2377f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f44d2474e39719b7bacf72efa355343

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
FindNextFileA
CreateMutexA
FindFirstFileA
FindClose
OpenMutexA
GetStringTypeA
GetCurrentThreadId
GetLastError
MultiByteToWideChar
TlsSetValue
GetCommandLineA
TlsFree
TlsAlloc
WideCharToMultiByte
GetSystemInfo
DisableThreadLibraryCalls
IsDebuggerPresent
CloseHandle
TlsGetValue
ReleaseMutex
GetModuleHandleA
ExitProcess
LocalFree
FormatMessageA
ReadFile
CreateFileA
VirtualAlloc

user32

wsprintfA
MessageBoxA

ole32

CoUninitialize
CoInitialize

oleaut32

SysAllocStringByteLen
SysAllocStringLen
SysStringByteLen
SysStringLen
SysFreeString
SysAllocString

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1002B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ