24ec756843a1be4c755743495a810b77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24ec756843a1be4c755743495a810b77_JaffaCakes118
Size

199KB
MD5

24ec756843a1be4c755743495a810b77
SHA1

3bf5e20ebddc290ceb37faaf2d12d2e0a238e66b
SHA256

6b21d0cbb9a323b6bf9fa959ec67a09ba18e255646f980b73e1ec8df1cae1e73
SHA512

41f1b22debc52dff83357ebe14eddbbcbc8fc3e5ca9b6f300a8e966267f1a864c5b8401fb98375f5a90813c6914fcf372b3177d6b95a78f92a66def1ad0568b2
SSDEEP

3072:ct65Tbogq+ojEbG1RdSSJ74n/f8amuC/Ohtj7jLd9/nMD/SCZjFXs0xePc1RjT1:U6BbogNxG1RPCL3C/OXh9/nmZj5sG39

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24ec756843a1be4c755743495a810b77_JaffaCakes118

Files

24ec756843a1be4c755743495a810b77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4ff4e9520d2b9d618be12fecec0c0ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA

lz32

LZCopy
LZOpenFileA
LZClose

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ