f51015c2607870f3c9f457adbf8acfc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f51015c2607870f3c9f457adbf8acfc5_JaffaCakes118
Size

39KB
MD5

f51015c2607870f3c9f457adbf8acfc5
SHA1

3d8713465cf4b41df690b3c11b4605b3677d35b4
SHA256

0a8c848cf0a9bc55d4b4f9b6eab6403b8eae9364ab87c9c6dd2181b6aa8bc286
SHA512

9bd2d4a17b9af81978b05275bd84ead96b10fa0c800cd12018e518f42db1e677c1187deb1566b43d336e8a8ccc0625a822112555a20f6600e51714c8d0335b6e
SSDEEP

384:Gh73+ZuNyJy1++NMEUlHYuB5LGaYLJD8EsgON6hPRNCB:GVOODShHfBVGaeCEXu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f51015c2607870f3c9f457adbf8acfc5_JaffaCakes118

Files

f51015c2607870f3c9f457adbf8acfc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81a18d27f03bdbb143ed6e5377411606

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CreateFileA
GetProcAddress
GetModuleHandleA
LocalAlloc
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
GetLastError
GetStartupInfoA

user32

MessageBoxA

msvcrt

_adjust_fdiv
??2@YAPAXI@Z
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ