3a1bae2ea0c0df564e8205f3930e0cf1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a1bae2ea0c0df564e8205f3930e0cf1_JaffaCakes118
Size

695KB
MD5

3a1bae2ea0c0df564e8205f3930e0cf1
SHA1

aa4ae4ca81fde63bbce27cbd55d88e1d05c72ef6
SHA256

c152c14c386a400e7cab8141a7690d15a57e2235f6252ff668603980fe4ecf60
SHA512

8b0a3af5e634c61d96a32f2df3327527150e45fdba0fb956ac641aa3efd2ef07a3c45bcab13fdc4484ddd9ec3e30d55f284f72867a1a70877988c8804e5bfbb7
SSDEEP

12288:KM65+9YxzBqAZRcvyGemX3HVGgF9tMz1wtoQ2lQtun0BtNkYIDRxw6:KOGbqAsvJDnHVG6hqQ20q1YIDjw6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a1bae2ea0c0df564e8205f3930e0cf1_JaffaCakes118

Files

3a1bae2ea0c0df564e8205f3930e0cf1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06a0e40e93055fb4656ecfda71124375

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
LocalFree
GetTickCount
GetVersionExA
GetLastError
GetFileSize
Sleep
GlobalAlloc
GetStartupInfoA
GetCommandLineA
lstrcpyA

user32

DialogBoxParamA
EndPaint
ShowWindow
BeginPaint
SetFocus
DispatchMessageA
ScreenToClient
MessageBoxA
GetWindowRect
GetMessageA
GetClientRect
TranslateMessage
CreateWindowExA

msvcrt

__set_app_type
_acmdln
_except_handler3
_controlfp
_exit
wcstoul
_c_exit
exit
wcschr
_XcptFilter
__p__fmode
__p__commode
toupper
memmove
__setusermatherr
rand
__getmainargs
__CxxFrameHandler
_adjust_fdiv
_initterm
wcslen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 673KB - Virtual size: 676KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ