a790bcb9f88059aa1f9162ba0714f3b9_JaffaCakes118 | Triage

Sharing

General

Target

a790bcb9f88059aa1f9162ba0714f3b9_JaffaCakes118
Size

13KB
MD5

a790bcb9f88059aa1f9162ba0714f3b9
SHA1

40beef1224e6cd86a07b88b35359e1343fdaabfb
SHA256

6f88ecef7c87cfeca186d7bf2d750ebd06541b0a311e5bd3c67ff02bf7b768e3
SHA512

b58f4acc4361a3e8b18c504ac918e5e8c868217e2dff640157f0a5ff0682f87b4ba3c0139810534129b0f55d5121acf87d191cc2e9cda0adbdb73be47bd2d92e
SSDEEP

384:6ORIq/zmVIiolzSf+CSNpE8S21SZCZg1ILeZg1Io:LRdGL0Sf+X7EwSoM+WMn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a790bcb9f88059aa1f9162ba0714f3b9_JaffaCakes118

Files

a790bcb9f88059aa1f9162ba0714f3b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05cf7ac0a0e4d36abee21f290977d162

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
time
srand
rand
strcpy
strlen
_except_handler3
strcat
atoi
mbstowcs
??2@YAPAXI@Z
??3@YAXPAX@Z
__setusermatherr
memset
_stricmp
_stat

kernel32

GetLocalTime
GetModuleHandleA
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
CreateFileW
OpenEventA
SetEvent
CloseHandle
OpenProcess
GetLastError
GetModuleFileNameW
GetShortPathNameW
lstrlenW
WideCharToMultiByte
GetStartupInfoA

user32

MessageBoxA
wsprintfA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ