8744b92dc4b6446fe7f4c1ab052cb4b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8744b92dc4b6446fe7f4c1ab052cb4b0_JaffaCakes118
Size

50KB
MD5

8744b92dc4b6446fe7f4c1ab052cb4b0
SHA1

f1cfb610f1ad5aa7e772b6bc2b5a1b427d4a1ef7
SHA256

2fc70eaaa7a14853c6c41919a0117702d1da2ef74bdc2bd56a80cf5bb3b83068
SHA512

5c9e37fb5703a6593f47c8561fdf56d55c7f983df7616110892ec09fa187120a2051b9e37ad9a26a5e679ebfb24d680c6ce9ac883a567e505215d55b9a18c10a
SSDEEP

768:q6S2M9nQveqtNuYxx8GdGPC7XMH44PXPAv/q+PEK6TAUv+Ac8ErASs7P:rSVQ3tNDj8OC/qq+MDNCr6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8744b92dc4b6446fe7f4c1ab052cb4b0_JaffaCakes118

Files

8744b92dc4b6446fe7f4c1ab052cb4b0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ae2feacf581a127ec8c21fcc379a58ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_getch
_iob
_itoa
__GetMainArgs
_strnicmp
abort
exit
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strncmp
strtol
wcslen
wctomb

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 608B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE