c7888265e91911ff22f3d7eba9decf7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7888265e91911ff22f3d7eba9decf7a_JaffaCakes118
Size

57KB
MD5

c7888265e91911ff22f3d7eba9decf7a
SHA1

2a643fcded368775c4000d83f88136de30c6d4ec
SHA256

43c8263ae5b95a974cad89e3256420a5c16c11085ba43e680f5c8f8e72e0356b
SHA512

cd9e24daf274475ff737ec485122fd55b83a2909ea5768754dce2c2068cb3d4a054fac146a820d3d1b1887656b851b5a8a300af96fcff71fb805b8a4c6ec7d78
SSDEEP

1536:fO0TGS/14lzgjm09u6oJu6zYLIR3CcSLPqirbDKwQ:fzyTALw8LIANSirbDM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7888265e91911ff22f3d7eba9decf7a_JaffaCakes118

Files

c7888265e91911ff22f3d7eba9decf7a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

0d0c13680e7925fe1692d5d6f835568b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_stricmp
_strnicmp
toupper
abort
exit
ferror
fgetc
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strcmp
strtol
ungetc
wcslen
wctomb

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 680B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 900B - Virtual size: 900B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE