fa4eca6a88e0184097b96e37086aad35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa4eca6a88e0184097b96e37086aad35_JaffaCakes118
Size

101KB
MD5

fa4eca6a88e0184097b96e37086aad35
SHA1

23eb0dddba6daa32842eaaeeec5d46ee2f232609
SHA256

fe7bbc78d47d4094fbd027b0d7e9039271394d38363c2754af91f3ad9fd9c4ea
SHA512

72b4a36d022a6fb92040fc2814c5ec270450132e2f81a3ac53a6bb7d1e8a96fe48d4de12865f450ad160d22cb4c55a54b9a181b504cb64913462047beb164133
SSDEEP

3072:WSVUaA/f/IOJ3A4QcEsXp+lt9tIQvtB3QM:WSVPEf/fJ3ATsXoltSM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa4eca6a88e0184097b96e37086aad35_JaffaCakes118

Files

fa4eca6a88e0184097b96e37086aad35_JaffaCakes118
.exe windows:1 windows x86 arch:x86

49f051ca68a9c2442d45e936bb70411c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_strnicmp
abort
exit
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strncmp
strtol
wcslen
wctomb

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 616B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 784B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE