b0a76f2b824f505c7945d45c58e10a1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0a76f2b824f505c7945d45c58e10a1b_JaffaCakes118
Size

93KB
MD5

b0a76f2b824f505c7945d45c58e10a1b
SHA1

5a82b3c9bb35d1340fb3c68a2083de82fd2f4abc
SHA256

38145de87df96055511bd2408a9c820a28f06b226176c81a0e7fd1a3e2683958
SHA512

caac1ddbf91644ae0347eed1f825b7a5e4a69c8c25defff0d6ba677896f9ec7be880c5b076c9ff4b2d346157fbfbaaefecf06815a818984b38ea8b3323519a22
SSDEEP

768:q3fLHq+v4tiiiii5vWMoZ/56lVbYuGGaql3ti7sHMTtNIBQJbvRJcvnyNQC+NaHa:uLHvv4a3pfYRPi6isKldN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0a76f2b824f505c7945d45c58e10a1b_JaffaCakes118

Files

b0a76f2b824f505c7945d45c58e10a1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc60a920495dd603b6329f9f82fb28de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\Acro_root_apms\build\Release-results\info\template.pdb

Imports

kernel32

GetModuleFileNameW
GetProcAddress
LoadLibraryW
HeapFree
GetFileAttributesW
HeapAlloc
GetProcessHeap
GetCommandLineW
SetStdHandle
ExitProcess
CreateFileW
GetModuleHandleW

shell32

CommandLineToArgvW

msi

ord173
ord205

user32

MessageBoxW

shlwapi

AssocQueryStringW
StrCmpW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE