a411c73b1ad5f98edb1f7d77ae28308d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a411c73b1ad5f98edb1f7d77ae28308d_JaffaCakes118
Size

60KB
MD5

a411c73b1ad5f98edb1f7d77ae28308d
SHA1

7f634b8651d77d0615f2d923212072dee29c044e
SHA256

e737a439fd31a96ad398f61b50970c085b401a02bd1cfa2ce4d27e9cab508a14
SHA512

ec817ba86bbbd0173cef0e10d336bae18f03bb1887a369b48da7307fd20750db0facc47b3cc4f297b074c37c99d2749625837ad504cfb50f6dc426a529f084d4
SSDEEP

384:w8vu5T8M16y6HyX9y1H+N9oAi14I4fN1OHfKqu/ZVbXuPIAxKSCYqzaIgBK3XTP:w82uM16Xjej1Oy1/ZVbXuPaJzGK3L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a411c73b1ad5f98edb1f7d77ae28308d_JaffaCakes118

Files

a411c73b1ad5f98edb1f7d77ae28308d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

332a76fdab61c9a7b0a170f32cd59c60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetLastError
LockResource
LoadResource
SizeofResource
FindResourceA
LocalAlloc
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

_initterm
??3@YAXPAX@Z
printf
sprintf
memmove
_exit
_XcptFilter
exit
_acmdln
__getmainargs
malloc
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ