89ceddadd595b59e24b3ecaa8439b7b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89ceddadd595b59e24b3ecaa8439b7b3_JaffaCakes118
Size

124KB
MD5

89ceddadd595b59e24b3ecaa8439b7b3
SHA1

c52050d74e4ff0740377abd5c4cfbb8f6f70c63d
SHA256

6e3f42f72df3644ed664b56e145c0a35b4979223c8b842a0442e5068e3dcd7ee
SHA512

189f8a92355d7f1c2ca23e880c3b49ccd2d6d0aa6e409ee38ba4712eb9f0f24d186b1c512941149f403801442a28ad88e10a9b2f3b1d1589f83c680ee7345dfc
SSDEEP

3072:thL9pu9V4CCLttfgWDilJi2H46ux+ocevPp:n8cttYWWe2Hru+zeHp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89ceddadd595b59e24b3ecaa8439b7b3_JaffaCakes118

Files

89ceddadd595b59e24b3ecaa8439b7b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a084dc5b6f1cf958bc179bcf0ed3942

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CreateFileA
GetProcAddress
GetModuleHandleA
GetLastError
LocalAlloc
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

_adjust_fdiv
??2@YAPAXI@Z
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uwcbuwp
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE