f441771865d46f3afc9175f025049ab0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f441771865d46f3afc9175f025049ab0_JaffaCakes118
Size

222KB
MD5

f441771865d46f3afc9175f025049ab0
SHA1

85b7765f908776090a7c0779f04c72c05db179ca
SHA256

2e03a3753bc9be3f138c542c51ecc8f7ab8aa242b220da4f8bd8216b8c80246f
SHA512

f6f0ad545388b5c84764a185d3c7416078337f323dbcf8b196f7ba29ac70f250672b31b053e9990cf119384aaff9955f08bf98c8854b71e39a4a3708ee3b1dc7
SSDEEP

6144:71APIjFFH6aBhCIH3xLxCPqwqmYLSpMel:7uPIPH6AhCaNCPzqpLSpM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f441771865d46f3afc9175f025049ab0_JaffaCakes118

Files

f441771865d46f3afc9175f025049ab0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a46eb5d8a26df66b7e5340e682f8a377

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
PostMessageA
GetMenu
FindWindowExA
FindWindowA

kernel32

lstrcatA
WriteFile
Sleep
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
LocalFree

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 218KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE