0213d814d44f49087a5319ecc2e2830d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0213d814d44f49087a5319ecc2e2830d_JaffaCakes118
Size

225KB
MD5

0213d814d44f49087a5319ecc2e2830d
SHA1

abf2cbb0efe4dcb90c23f7d6641e348c3645ff26
SHA256

1051a14499919ecb900012883abc35ba7abe9476dc4fe6e61b5a18500f40f20e
SHA512

0c6777e3035e86368cc23c8512552c84dd0f78afcfa3a4ad4d64a0d1e67b88452e7c46061445932f17705260c0c0bb4e2d05c7b9b329b8be3a799973c34ee64d
SSDEEP

6144:JWyfNRYgb7UXzt6cbk5ofeDyWI1qZGrHc7s:JWMRYK7UXz8yk2fiyb1qZGrHcA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0213d814d44f49087a5319ecc2e2830d_JaffaCakes118

Files

0213d814d44f49087a5319ecc2e2830d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a0f4fa5d3b7555d8d12fcdb325ffb4bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
PostMessageA
GetMenu
FindWindowExA
FindWindowA

kernel32

lstrcatA
WriteFile
Sleep
CloseHandle
CreateFileA
ExitProcess
GetLastError
GetTempPathA
GlobalFree

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 222KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE