12dc08c167e3eec8118344fb4d33e793_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12dc08c167e3eec8118344fb4d33e793_JaffaCakes118
Size

80KB
MD5

12dc08c167e3eec8118344fb4d33e793
SHA1

47539ac48e1a6ace85fc24b2a03374d901285b88
SHA256

bc0c238cdd33a3aa6bc516847ceb3532e2cd048fa044e89e85f5091e1f388887
SHA512

a6cdcac9225159db7a20b1ea1a79783aed5bd812efd62e7e8cc20e410c8385d339f0fd8da8422edd509b8e370774c8591c6041dc926a540dbff6a3ca663f8e5d
SSDEEP

1536:2oqVtXuYILxqWJkrMkyTvpmauGuVRO7AQbt2F/qSFmDuTkl8c:2RV9BIlL2rniEauG/752/4DuTe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12dc08c167e3eec8118344fb4d33e793_JaffaCakes118

Files

12dc08c167e3eec8118344fb4d33e793_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39ea53cc3f58daa315871d875e7facfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
lstrcatA
GetModuleHandleA
GetLastError
GetEnvironmentVariableA
GetWindowsDirectoryA
GetStartupInfoA

user32

DialogBoxParamA

msvcrt

__setusermatherr
memset
malloc
memcpy
free
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ