b914a52b807068d2b37cfa2d2288f996_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b914a52b807068d2b37cfa2d2288f996_JaffaCakes118
Size

144KB
MD5

b914a52b807068d2b37cfa2d2288f996
SHA1

fd7bf8f858cef69eb0242a6b189b44976cf41d89
SHA256

7f176c075e50df9e39c20ff1399d62db231963f38e10b5467e1e7642e039ac42
SHA512

0dec5a67e902574dc4015af5d0e3f081ca2d366ac3897723b882b3ff39f019269d6e291e8b615b0e46542e620e392879376cd2fbc69849b619c6ef0fd39f42b1
SSDEEP

3072:0M16v5SYFT5Tvo0RcvJTTQc92/Y2E9elTMPTX/D:0Mo5X5TvBRkTk/Y2E9qTCDD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b914a52b807068d2b37cfa2d2288f996_JaffaCakes118

Files

b914a52b807068d2b37cfa2d2288f996_JaffaCakes118
.exe windows:4 windows x86 arch:x86

332a76fdab61c9a7b0a170f32cd59c60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetLastError
LockResource
LoadResource
SizeofResource
FindResourceA
LocalAlloc
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

_initterm
??3@YAXPAX@Z
printf
sprintf
memmove
_exit
_XcptFilter
exit
_acmdln
__getmainargs
malloc
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ