1319acf88c67b121cd595d5cb415a7a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1319acf88c67b121cd595d5cb415a7a1_JaffaCakes118
Size

50KB
MD5

1319acf88c67b121cd595d5cb415a7a1
SHA1

74e1ba54c853b6b571c479f6e92706149e78a35a
SHA256

89f5f04f18aa70e0d48a938de399580b6d4ee41e40a0213d2d215a6b2974b9a5
SHA512

ede683cc5014c303b3778556fb2c30fd1a66853c0aee4cfc42408d93e3acc6605428629bd56f3e428073ccb219a83d36392ff8cf36d39b83dc15352c99b8f348
SSDEEP

768:JkKhnQQ5y4R/eMN4Fiai/roPrPAu3ObqLBpbgWjEPk6VUHp7rDKFL/Ay:+KhnDIivTa3LxkqFl6Pk6WHNq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1319acf88c67b121cd595d5cb415a7a1_JaffaCakes118

Files

1319acf88c67b121cd595d5cb415a7a1_JaffaCakes118
.exe windows:1 windows x86 arch:x86

246667c7894354b09bdd4b0924ff921a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_strnicmp
abort
exit
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strtol
wcslen
wctomb

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 608B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 760B - Virtual size: 760B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE