f88d4bd72a3dbbc10533ea714c7aee89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f88d4bd72a3dbbc10533ea714c7aee89_JaffaCakes118
Size

20KB
MD5

f88d4bd72a3dbbc10533ea714c7aee89
SHA1

faac9afab705a9392fbe7a480981d7805f47bdb5
SHA256

1b86d295686d0fdbc943fd01ca92c1e2168e26ac4b5b22d2d7c1a8d7c80986e8
SHA512

f320851a9f3609e0cfc58fd0c4d61759916f3c2a57855515b6a1ad0ca86761f0631e14db1f74c950a84e06339c958a53f4c53a7dbed20c3473151798f860d165
SSDEEP

384:McH49AaX5nQDdSFQrxdeKpcXXpcK2tOl0szto:MphXBjirNcXXph2Al0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f88d4bd72a3dbbc10533ea714c7aee89_JaffaCakes118

Files

f88d4bd72a3dbbc10533ea714c7aee89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f9440196c2d5e2d2b903a414ff6ffd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
CreateEventA
GetFileAttributesA
lstrcatA
GetProcAddress
SetEvent
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetTempPathA
lstrcpyA
lstrlenA
SetFilePointer
LoadLibraryA
RtlUnwind
ExitProcess
CreateThread
WaitForSingleObject
GetVersionExA
WriteFile
ExitThread
CreateFileA

user32

EndPaint
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
ShowWindow
CreateWindowExA
SetThreadDesktop
CreateDesktopA
CharToOemA
DestroyWindow
wsprintfA
IsWindow

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ