455b4aba10c8a9ca0ab1fb4d107268e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

455b4aba10c8a9ca0ab1fb4d107268e5_JaffaCakes118
Size

124KB
MD5

455b4aba10c8a9ca0ab1fb4d107268e5
SHA1

ed3ef69ecfd623a6e976cd0a466aae5185798f18
SHA256

53e27158083f0afc86452153447b8c39a4c21b81d61459d0501dd79b39427b29
SHA512

cfafaa96d91522c0e62a092159914e65e8a4236e275133adb69f343900f49e167d27eb72fdf951291aabe4b6f555dc6c939720ec555c7c33b14d2d5728d655c7
SSDEEP

3072:I8iKXBqLRjP+z1XkNzLBWJNBSarcKo7d/EjMyC0vAtLY:I8ivt+z1ELBWJN/o7dE3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
455b4aba10c8a9ca0ab1fb4d107268e5_JaffaCakes118

Files

455b4aba10c8a9ca0ab1fb4d107268e5_JaffaCakes118
.exe windows:1 windows x86 arch:x86

3818ac21c733d1176f4a3e4b0e7d7c2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_stricmp
_strnicmp
toupper
abort
exit
ferror
fgetc
fputc
fwrite
localeconv
malloc
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strcmp
strtol
ungetc
wcslen
wctomb

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 664B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 924B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE