a35ea33d2cfe50b42107648bd68e0b5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a35ea33d2cfe50b42107648bd68e0b5c_JaffaCakes118
Size

19KB
MD5

a35ea33d2cfe50b42107648bd68e0b5c
SHA1

579c4a50e1a2343cc545d334b6ab1fe86dc5ab4e
SHA256

5033e1f6a46e95e600841133fc3a69c97e2ddd0338ce969184773c579351cbf1
SHA512

88ef7aec64f7085e2497e3b714a8fd81f0ff346433c43a696b1a4d91254c5602be4ae79e9f1466f29cb4cdbe1dba475fdd917a4470c2d37fcf9fbd140d855042
SSDEEP

384:4L15g+qMKjbSr6bH022Rg5G/I2A/FXVgEwASCZugDpZ3S:4LqMKSgiI2ArkCDDG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a35ea33d2cfe50b42107648bd68e0b5c_JaffaCakes118

Files

a35ea33d2cfe50b42107648bd68e0b5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db277f0791c951abbedd687d9de0fc32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter

user32

MessageBoxA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 627B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ