03a47ec6623d2ecfb7eeb320d9198315_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03a47ec6623d2ecfb7eeb320d9198315_JaffaCakes118
Size

16KB
MD5

03a47ec6623d2ecfb7eeb320d9198315
SHA1

43102ffc530e89d838ae31921e457c76986be9a0
SHA256

9aac201071e4e13b4d16929847286e55b8c55310b683f73df3dd2d880aee3516
SHA512

414f70545933ae776cc8b4c95cafa6cfa26bff0ec4ca8957d5e49c59ee3c93b8e9918dfc36a30f1bcc945183bbe3dfcd01be68d2c927ac6485cae58d461f54d2
SSDEEP

384:vumMXbKAxwONbDjur0YhQboyRxElVBpGHASg:ZowONiF2ElvA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03a47ec6623d2ecfb7eeb320d9198315_JaffaCakes118

Files

03a47ec6623d2ecfb7eeb320d9198315_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db277f0791c951abbedd687d9de0fc32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter

user32

MessageBoxA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 627B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ