1c2402452afbd1ba4d3e40d6403346ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c2402452afbd1ba4d3e40d6403346ef_JaffaCakes118
Size

380KB
MD5

1c2402452afbd1ba4d3e40d6403346ef
SHA1

8b33edf656b5e6725e5203e341f5e1139ad9ec32
SHA256

959ca33f2ea6d9b4167d6ebedc54722d75835bf5fc6d2414334617b49a13243c
SHA512

10a96f8446d888563014e84eba4de9e661de27ab7969914d021e3f34404727e5edc3be3532cb608a26ec5189a26ff10ab29c70a2e577f9c96a5a5ae2658df3c3
SSDEEP

6144:JvcAe8NPxMPc9STMvqn6WxZXC05Mejc1JqTe/6hS1f/CsJhgyBpumtcVLfbaiYT:JknoPaPc9xynlSELjc1JQ86hgH3TFHVF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c2402452afbd1ba4d3e40d6403346ef_JaffaCakes118

Files

1c2402452afbd1ba4d3e40d6403346ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

916fa89f9cf7675997160449f96cf87a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindow
ShowWindow
MessageBoxA
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA

kernel32

GetCommandLineA
WaitForSingleObject
ExitProcess
DeleteFileA
GetLastError
FormatMessageA
GetStdHandle
CloseHandle
WriteFile
CreateFileA
GetCurrentThreadId
GetTickCount
lstrlenA
GetTempPathA
lstrcpynA
LoadLibraryA
Sleep
GetVersionExA
FreeLibrary
GetProcAddress
CreateProcessA

shell32

ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE