f5c88be4c5883db9be8078d5e7011e7f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5c88be4c5883db9be8078d5e7011e7f_JaffaCakes118
Size

126KB
MD5

f5c88be4c5883db9be8078d5e7011e7f
SHA1

593a6b7b4baca5e098ab66f4e7804c5d34f15b8b
SHA256

be49e556a3dfa682812ddb30f576e65d7d3a0248400e01fe75f323c24270568d
SHA512

7983aedce1cf8c954ca971b93915db6afca245d6bd0dce63cb9df2d1b30a629f2bccf7125a45885765fb8a1e23f0fd49e8239ccc782dc1f2f5dcebd89d79545d
SSDEEP

3072:VHxiK7JqLEaSJN1wy54fNaMwE/RlOyW1UDGHotL0:txib2JN10ZD5LA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5c88be4c5883db9be8078d5e7011e7f_JaffaCakes118

Files

f5c88be4c5883db9be8078d5e7011e7f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

9e06c8fa8e8df3631155997107cd0bc1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_stricmp
_strnicmp
toupper
abort
exit
ferror
fgetc
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strcmp
strtol
system
ungetc
wcslen
wctomb

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 664B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 924B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE