225b8549fa0490113ef91967ae1d38d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

225b8549fa0490113ef91967ae1d38d2_JaffaCakes118
Size

6KB
MD5

225b8549fa0490113ef91967ae1d38d2
SHA1

38952fa2ef2ad1088c720bbb5700713cb6aa8800
SHA256

ea6cd880a5922e207d5c791a003c3b47cf914ab109fbb7b117940fe09845d7d9
SHA512

e95dc69e0b982dddf88800ea04b7968b9e12283960af3395b167591e7361bf003fd562200c2626495c99c33d0bc48b97bb187dcf50887e93b7a2f6f9727eb39d
SSDEEP

96:3d80+wlZjHAkwxsbAIbdsQOOCCIx1LH04FxEoaJOWPnAiIWifiifEI/gHWmi:p+wlZj+xsbAIbdsQOO/Ix1704FxErJOv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
225b8549fa0490113ef91967ae1d38d2_JaffaCakes118

Files

225b8549fa0490113ef91967ae1d38d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1facfdc3ed1539053fb283a945e88295

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrcpyA
WideCharToMultiByte
GetModuleFileNameW
CreateEventA
WaitForSingleObject
CloseHandle
PulseEvent
HeapAlloc
GetProcessHeap
HeapFree
GetCommandLineA
Sleep
ExitProcess
GetModuleHandleA
SetEvent
CreateThread
CreateProcessA
ExitThread
Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleHandleW
WriteFile
ResetEvent
ReadFile
FindNextFileA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

user32

CreateWindowExA
CharUpperA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
PeekMessageA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE