a93622ff585b58f14a9ece6adfc40b55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a93622ff585b58f14a9ece6adfc40b55_JaffaCakes118
Size

34KB
MD5

a93622ff585b58f14a9ece6adfc40b55
SHA1

2fe3e8f4c710941d12f641b34e4989abe9663c31
SHA256

050ded1d6895194ce4ee4c44ef015ed3cddceef4e856d7c7cf68d88417945d16
SHA512

a9b5313d34db22eef59b07f921b4eb0ab7a4bb1e24bf0dd965afa203008b4594d46182f073d53f67f7fa0d60bee3e4ff5dee11dd02809f16eee037a2e31ccb84
SSDEEP

384:b8bA6AoybZ134BsR1GEA8jggHHzq2jg+4cfTLsJgYWefo6XAvgDS39p0:s8n31Gf8jbnzq2j74CfeEefqYGtp0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a93622ff585b58f14a9ece6adfc40b55_JaffaCakes118

Files

a93622ff585b58f14a9ece6adfc40b55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8953aa3fd63782bbd62e0ca4a4e8e8cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetEnvironmentVariableA
GetWindowsDirectoryA
lstrlenA
LoadResource
GetLastError
GetSystemDirectoryA
LockResource
GetCurrentDirectoryA
lstrcatA
GetTempPathA
GetModuleFileNameA
lstrcpyA
GetStartupInfoA

user32

DialogBoxParamW

msvcrt

__getmainargs
memset
memcpy
malloc
strcmp
free
strchr
_exit
_XcptFilter
exit
_acmdln
strcpy
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ