04953a82b63861dbbcfc223f952b8dfe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04953a82b63861dbbcfc223f952b8dfe_JaffaCakes118
Size

8KB
MD5

04953a82b63861dbbcfc223f952b8dfe
SHA1

020dff2afa47296590301ad178d8b3bb37c8682b
SHA256

9838ef50d7fae5e915f66e7068f3620853e5b2eba16966293d88f005812c624f
SHA512

71ab2ecfcb95a2a3ac86affa556bcdf39b7e23863272c11c825501b8e71fb6090ca5d7b73a166d5428760527220e2dde5f78a0a78593d2af2329210d8ee1a9ed
SSDEEP

192:x0H0G6wUqG9IyV7SM4o4feeEEZpaHmAoK:xqxjUqG9H7TweUpGm5K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04953a82b63861dbbcfc223f952b8dfe_JaffaCakes118

Files

04953a82b63861dbbcfc223f952b8dfe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ