b9f3422501309264f40e755277979447_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9f3422501309264f40e755277979447_JaffaCakes118
Size

62KB
MD5

b9f3422501309264f40e755277979447
SHA1

9be7e34468a8a9f259c90a0783bbd6c3e5ae666e
SHA256

cbc88401a7cdfd6107a9d3f08e0f17bfc655d130ec583808332156e02a39855b
SHA512

3803a71352ece828ba235d7ea878ccfb32ba8c5707613743519fd4744f3651bce3c246284740db8380ba09b2c717d1249cc3a536fdea990c5a5c9b46758fdf44
SSDEEP

768:Bf667fj0O9ynsreoNppKlisroPrPAub+HqH9pboKIQjURdXhxRgd4rhR7/gtYaNU:o6fZssb4l2Lxcqdl2Q47xXdhR90nU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9f3422501309264f40e755277979447_JaffaCakes118

Files

b9f3422501309264f40e755277979447_JaffaCakes118
.exe windows:1 windows x86 arch:x86

c8e5eb7372dd12f0b02926efe16f5713

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_strnicmp
abort
exit
fputc
fwrite
localeconv
memcpy
memmove
memset
raise
signal
strcat
strchr
strtol
wcslen
wctomb

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 612B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 740B - Virtual size: 740B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE