e859b47c89c599494f1def3eff1ae243_JaffaCakes118 | Triage

Sharing

General

Target

e859b47c89c599494f1def3eff1ae243_JaffaCakes118
Size

92KB
MD5

e859b47c89c599494f1def3eff1ae243
SHA1

d529bab272fd5a9649ea0d61b16e47bcf09fe22d
SHA256

d5f1020da94d77e9dee245319d3d3c9323b0953d8b51fe16bbe6154ca1e3d1a8
SHA512

8019e30eb31b4d4b4a58420cabf101e51a69d7d54f3bfa9567a24a043f99c909d519ada4f2735000923c1101ef7425fb5854290c1ffc86f67ff62e9f29f3393d
SSDEEP

768:6H6dyEmquM16T37+CBfB78pdW/hKEZlJ+3Q2vBIAUVIx0TqhztTFsHnhCNjDD/uh:Y4m3M16T3xRZ8pdKxMgojmHhCNjDDT4V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e859b47c89c599494f1def3eff1ae243_JaffaCakes118

Files

e859b47c89c599494f1def3eff1ae243_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2fa011e6dd11cf4521a35eaf70b7367

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetLastError
LockResource
LoadResource
SizeofResource
FindResourceA
LocalAlloc
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

MessageBoxA

msvcrt

_initterm
??3@YAXPAX@Z
printf
sprintf
memmove
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
malloc
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ