bd52ce8eb4fe71fce681bf1e03cdbff2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd52ce8eb4fe71fce681bf1e03cdbff2_JaffaCakes118
Size

56KB
MD5

bd52ce8eb4fe71fce681bf1e03cdbff2
SHA1

6d984547af50faaae2b4146f7ed4c92b1a7d6d7d
SHA256

ac058f9e5b7855f3b4f5ea962d7e63d83444879d0a43d0b3080822d8e07310b6
SHA512

26b44beae201bd213a172b7471c0890cbe0d2d6221392d332407cc800c146bac0f7cb215fa21d02b23a63dc2f87fc8953142e81ed7cfccc0c2b03c50c8c8f851
SSDEEP

768:iVjgo/y8cAM5OOx6L10nd4ZBVdpovJyFjuhNodDQAw0wAiw/IUXtEG:w0OgQ2nWZBVd8GCQdBw0/gctEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd52ce8eb4fe71fce681bf1e03cdbff2_JaffaCakes118

Files

bd52ce8eb4fe71fce681bf1e03cdbff2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1131a5696e784e88f12c46f7a1d8c8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
memset
sprintf
_snprintf
memcpy
malloc
strtok
strcmp
strcpy
free
srand
rand
__p__commode
strlen

kernel32

TerminateProcess
OutputDebugStringA
Sleep
OutputDebugStringW
FindResourceA
LoadResource
SizeofResource
LockResource
GetTickCount
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA

user32

MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ