bd0c256584bd4569364e8145b5dad1ab_JaffaCakes118 | Triage

Sharing

General

Target

bd0c256584bd4569364e8145b5dad1ab_JaffaCakes118
Size

44KB
MD5

bd0c256584bd4569364e8145b5dad1ab
SHA1

99bf686e154a8125480797436e868984b0dd6b39
SHA256

07086cf407b3d34c75a61b020c1ef6b7f141a51461c26fdd25ffd91d27c95cc6
SHA512

4094c7e7d451dd1b0dec0558ff7c7606d48529db32a58772a087bb111850a3724a40825dfbd7be1e8e73b2ff82786ecd7f14411d6074b15b03d4eda82629233e
SSDEEP

384:euXHCKr+5GqzyUc1a+NMvjIQqHN4+Uhb1P2MsQoyFPd:GabZXSEBup1OIl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd0c256584bd4569364e8145b5dad1ab_JaffaCakes118

Files

bd0c256584bd4569364e8145b5dad1ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68739bf3099b04e7d027b66b1c8ab57a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CreateFileA
GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetLastError
GetStartupInfoA

user32

MessageBoxA

msvcrt

_adjust_fdiv
??2@YAPAXI@Z
strncpy
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE