92bffaad71600550f64eacbff5ef21de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

92bffaad71600550f64eacbff5ef21de_JaffaCakes118
Size

7KB
MD5

92bffaad71600550f64eacbff5ef21de
SHA1

d5f040254af641cd488d07cde2b02eb497eb9706
SHA256

d0b02e8a11f158e3577da0bd5bb13e617d4a49a1fb94109bb799f28bace04c69
SHA512

30a96ed4e9e36d089159ba1e74ada0ee77a4b193135252335c921a1c48c502ba367857f4013ad825a73dba03b87ec54962832c3ce16b8fb1b3e17ec05e31ffa0
SSDEEP

96:Z1ICMbMohNqpB6upyKMznZpiAqarswvIlh5Af+lf+pf+ef+IEJO:svAohNq/TUjQCf+lf+pf+ef+IS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92bffaad71600550f64eacbff5ef21de_JaffaCakes118

Files

92bffaad71600550f64eacbff5ef21de_JaffaCakes118
.exe windows:1 windows x86 arch:x86

b1037fd5f233bc5127f009441eb2a505

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateMutexA
CreateToolhelp32Snapshot
ExitProcess
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcAddress
LoadLibraryA
OpenProcess
Process32First
Process32Next
RtlZeroMemory
Sleep
TerminateThread
VirtualAlloc
WaitForSingleObject
lstrcpyA
lstrlenA

user32

ShowWindow

Sections

.asdasi
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c231asc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ