e05e45c3bebd411657d416c6d88f7f96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e05e45c3bebd411657d416c6d88f7f96_JaffaCakes118
Size

260KB
MD5

e05e45c3bebd411657d416c6d88f7f96
SHA1

df85122be7188aa495261464e87506cab996cde5
SHA256

d2e0e78a525edeaf3c6873db76df8bf92206753b24d8b2427e90b698d560eac7
SHA512

7183ddbd8d908547836e6803b3caad92d7c019144ad6012e14c48b7c24aab7f3cb0c02e4c3ab1471f1ae12e618b8f63a9ec4a848bdd110e3cc28e98c3c5d49d4
SSDEEP

6144:eMoPY9AU6J59IKL/f28AYwpU3bSfzHaVX0yP8g:e9PMT2fz2ND+Ew8g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e05e45c3bebd411657d416c6d88f7f96_JaffaCakes118

Files

e05e45c3bebd411657d416c6d88f7f96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

332a76fdab61c9a7b0a170f32cd59c60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetLastError
LockResource
LoadResource
SizeofResource
FindResourceA
LocalAlloc
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

_initterm
??3@YAXPAX@Z
printf
sprintf
memmove
_exit
_XcptFilter
exit
_acmdln
__getmainargs
malloc
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE