f732c801b7c763479390c22b923331de_JaffaCakes118 | Triage

Sharing

General

Target

f732c801b7c763479390c22b923331de_JaffaCakes118
Size

48KB
MD5

f732c801b7c763479390c22b923331de
SHA1

59d0427e36f40b1c710359a2ba101b42b9fda6d6
SHA256

45a2c91c5b6b542bdf09292e4671ab20bd909f8f1598a5b70ee2e36a957d7900
SHA512

99a5d674ce0b529d27e0bc713fc279609ba7b8ed23541e286f7562797f425c4b1d212e14bb1fa54fb9efb2d7ed2f1b8f95abd813e27b91fec1c007ebc8e68fff
SSDEEP

384:y8DFf1YWLhWiR+dZ+yRxxjbjh0WD36b1bxO/nqnZvysLsMzDOlx:LjtdR+dYy5jneWUG2vysYMzE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f732c801b7c763479390c22b923331de_JaffaCakes118

Files

f732c801b7c763479390c22b923331de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae2cad5ec0b404e2a672770ee08a029e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
WriteFile
GetStdHandle
lstrcatA
FormatMessageA
GetModuleHandleA
GetLastError
lstrlenA
SetConsoleTitleA
GetExitCodeProcess
WaitForSingleObject
lstrcpyA
ExitProcess
GetConsoleTitleA
LocalAlloc
GetCommandLineA

user32

GetWindowThreadProcessId
FindWindowA
CharUpperA
LoadStringA
CharToOemA

shell32

ShellExecuteExA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE