f63830b8d626bd9a13544eae0b0f57ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f63830b8d626bd9a13544eae0b0f57ff_JaffaCakes118
Size

32KB
MD5

f63830b8d626bd9a13544eae0b0f57ff
SHA1

995e989c4da6f672560d3f9d95b2c5c489be24f0
SHA256

91a9fae5d82d226b0b4348660489433b703e73bc38827ec422b9bfd7b7e868cc
SHA512

ec3a71b9c43948cc15132b93d766dcc1cfd86cf144e49d1e57a49e60ffe18154139286940d55d13431d0e6c06bb3dab9f10e3bf3d6dc9d2a0c1c743d0229c8fb
SSDEEP

768:58TlOKyRY98irwBsS652Ff6Ylp6B0ImY:yTJOBVzFfFi0XY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f63830b8d626bd9a13544eae0b0f57ff_JaffaCakes118

Files

f63830b8d626bd9a13544eae0b0f57ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82d106562adc6bbce3583f3f346703f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
LCMapStringA
LoadResource
LockResource
SetUnhandledExceptionFilter
CreateMutexA
CloseHandle
SizeofResource
GetSystemInfo
GetCurrentThreadId
ReleaseMutex
GetOEMCP
GetEnvironmentVariableA
SetEnvironmentVariableA
UnhandledExceptionFilter
InterlockedIncrement
FindResourceA
OpenMutexA
InterlockedDecrement
ReadFile
CreateFileA
VirtualAlloc
ExitProcess
LocalFree
FormatMessageA
GetModuleHandleA

user32

LoadStringA
GetMessageA
MessageBoxA
TranslateMessage
wsprintfA
LoadCursorA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 918B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ