159859e3e1e04331404648eac5077740_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

159859e3e1e04331404648eac5077740_JaffaCakes118
Size

7KB
MD5

159859e3e1e04331404648eac5077740
SHA1

36f7725c4d150fbbc5505428b5f2fe3786a8fba9
SHA256

2dc922b38a6e782d579aefa5c9089b17aaafdba9a23c840c32bd828cd518a0e3
SHA512

b4a34f9b78e30318608f2319b48c03aa2944e8cb344dc7ec9ab8b531cc6f8702ecbbd2741a4da34fe68dc7336a0816165e4a97b27a318b07d7d19f6ad68ee0ab
SSDEEP

192:S0H0G6wUqG9l7YtRQlAY0S7mFvJawDZ/qcNZDZ/qccJvh7g:SqxjUqG9l7YtRQlAY0wmVJawDZ/qcNZJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
159859e3e1e04331404648eac5077740_JaffaCakes118

Files

159859e3e1e04331404648eac5077740_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ