b19f77bde7c933d2df999d5ce85b5e89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b19f77bde7c933d2df999d5ce85b5e89_JaffaCakes118
Size

71KB
MD5

b19f77bde7c933d2df999d5ce85b5e89
SHA1

7e9be6596220eefa265cc51d83c62f480a3017d6
SHA256

0d2ac3887da79bd8fa9aa829aaf8ac1fa239b925b2c87fc5686744d58ae5a29c
SHA512

fa0aaa1b4253143be509ee297278ec9e9d601a9a695c828b490e30ccd0d72b3edd71696cc5600d3e99008314dc5a014f5fc2a7a3050ad5e7b2d98cb85d644975
SSDEEP

1536:hh3Wod4F+YqSWLOlC7pew7rcaGbPS63a4uCYY7YTh:h5WMGcD7pVHcLbB3a4T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b19f77bde7c933d2df999d5ce85b5e89_JaffaCakes118

Files

b19f77bde7c933d2df999d5ce85b5e89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82902b0579fec56118ee8dc534004ab5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetModuleFileNameA
lstrcpyA
GetSystemDirectoryA
GetWindowsDirectoryA
lstrcatA
GetModuleHandleA
GetLastError
GetCurrentDirectoryA
lstrcpynA
GetStartupInfoA

user32

CharLowerA
DialogBoxParamA
CharUpperA

msvcrt

_exit
strchr
isalnum
isspace
free
isupper
memset
memcpy
_controlfp
strcmp
strcpy
islower
malloc
strcat
strlen
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ