04a3cf66b4469e60091d0a533f4459ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04a3cf66b4469e60091d0a533f4459ca_JaffaCakes118
Size

8KB
MD5

04a3cf66b4469e60091d0a533f4459ca
SHA1

29ff0e5bb990ab293c1554204e8c9ee4a3caec31
SHA256

9a02240887eb9d16b34e9c8e9b8ebeb3dc9b3937c890a2de64dc7c02a1816ad2
SHA512

c3a5fcaa876a7275511a4d7d1a3bdb73b8de6a54da0bd1524750743307ee6d0a5eaf7ff0b62376132280f89bb71bc0209d0dfa1d42ca7fa7b35ea700830f3302
SSDEEP

96:B30H0GV2/wUqGhj6yV7nS62sQC4o4fOYyTSzm9izZp43Z9NVb:N0H0G6wUqG96yV7SM4o4feeEEZpaHVb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04a3cf66b4469e60091d0a533f4459ca_JaffaCakes118

Files

04a3cf66b4469e60091d0a533f4459ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ