3a4af5b2a137dfd53a063f7be038178a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a4af5b2a137dfd53a063f7be038178a_JaffaCakes118
Size

701KB
MD5

3a4af5b2a137dfd53a063f7be038178a
SHA1

a77e8c5296f6536a7e364739feb3fc70d643beb2
SHA256

0646595b7496ffeb1e844084d2574150f696f7bfe4012a9e95f86e482a437691
SHA512

0fa9a19e660b43eafb0c21b01610604b9e545e83d2a7c1654ca8638f0b47eef5ae72700b6bcadb2db8fd4d4e8b3d8283c9354de5da39f480a9690388a04f16b9
SSDEEP

12288:sOhc7xVLGED3dHuCXhBTYcHo5v355sEH0uRiV+IImaL/2Y8tlcOWCK3Q6ucwae:lIbLGEpOI9YCMvXsEH0uRiV+W8H8tlcu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a4af5b2a137dfd53a063f7be038178a_JaffaCakes118

Files

3a4af5b2a137dfd53a063f7be038178a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06a0e40e93055fb4656ecfda71124375

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
LocalFree
GetTickCount
GetVersionExA
GetLastError
GetFileSize
Sleep
GlobalAlloc
GetStartupInfoA
GetCommandLineA
lstrcpyA

user32

DialogBoxParamA
EndPaint
ShowWindow
BeginPaint
SetFocus
DispatchMessageA
ScreenToClient
MessageBoxA
GetWindowRect
GetMessageA
GetClientRect
TranslateMessage
CreateWindowExA

msvcrt

__set_app_type
_acmdln
_except_handler3
_controlfp
_exit
wcstoul
_c_exit
exit
wcschr
_XcptFilter
__p__fmode
__p__commode
toupper
memmove
__setusermatherr
rand
__getmainargs
__CxxFrameHandler
_adjust_fdiv
_initterm
wcslen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 679KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 728KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ