158435e1fd099a2bb3992cb91d15c3e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

158435e1fd099a2bb3992cb91d15c3e6_JaffaCakes118
Size

237KB
MD5

158435e1fd099a2bb3992cb91d15c3e6
SHA1

a28c819ef6e8cc68ed2a8cd620a7cf3b7f66aa59
SHA256

c4b622b204986a9b0347595ba5bc92bad97652c5e6792c7533aaab0173da2a36
SHA512

96a7310360dcbef5b826b3f9729cc085c45078c39a96f4b1a31523bf5c8057d314d65a91c41c2bd0e513ec17014b3301c7e44983d6bd823f3c75f3cdfdac3949
SSDEEP

3072:QJ3d56EuMbEmArHeAJN3fJfQWzQQcvPoVrRw4oJ:QJcMWrHBPJfFQQcnoVy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
158435e1fd099a2bb3992cb91d15c3e6_JaffaCakes118

Files

158435e1fd099a2bb3992cb91d15c3e6_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

d7e47c7fb949a181ac08b08e8ca5d50e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
WriteFile
CreateFileA
LockResource
SizeofResource
LoadResource
FindResourceA
Sleep
GetLastError
DeleteFileA
ExitProcess
RemoveDirectoryA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
lstrcatA
lstrcpyA
SetCurrentDirectoryA
CreateDirectoryA
GetTickCount
GetTempPathA
EnumResourceNamesA
lstrcmpiA
GetCommandLineA

user32

wsprintfA

Sections

.text
Size: 1024B - Virtual size: 769B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 846B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 234KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ