f9e32bba79987741033a5548bb217cc3_JaffaCakes118 | Triage

Sharing

General

Target

f9e32bba79987741033a5548bb217cc3_JaffaCakes118
Size

42KB
MD5

f9e32bba79987741033a5548bb217cc3
SHA1

934451e725614dd2a2ff10d98397db2f7e2e5c7c
SHA256

1af5a3925513fe9b09650d75228695ef40cdedeae4a957291de9c516cdb7511d
SHA512

68905cb55335d7a0d91f7ad10d6a972c6c2cefcdeef3d8d1c0fc0ee8b93ca6e3770fab2b2846123e91261b45cbbb5419388da72502bda0f568dd5cbb0a5fed78
SSDEEP

768:WuqC0XaTgWNKBnb41GycTYp93ZC/gDSF+6VKd5Ul5KdDVMxdkJ94ve:WFC0XSgWf1p93Z0F+6VKdCKMxdXG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9e32bba79987741033a5548bb217cc3_JaffaCakes118

Files

f9e32bba79987741033a5548bb217cc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e88f0e8ccd8d511ea7eed8b6ec9e643

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

uniansi

FormatMessageW
GetModuleFileNameW
lstrcpyW
LoadStringW

kernel32

GetUserDefaultLangID
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
lstrlenA
lstrcmpA

user32

MessageBoxW

ole32

CoInitialize
CLSIDFromProgID
CoCreateInstance
CoUninitialize

oleaut32

SysAllocStringLen
SysAllocString
SysFreeString

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
_exit
_acmdln
_XcptFilter

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE