253872e6042dfd5259b9c38d7e817221_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

253872e6042dfd5259b9c38d7e817221_JaffaCakes118
Size

8KB
MD5

253872e6042dfd5259b9c38d7e817221
SHA1

8650f13c9fe47983b86b92be5f754b6461daff55
SHA256

05f880d9deebb903633fba1807d209a2e6aa682925985451b26b275c3fd21277
SHA512

c9fe08c84d2001ce27113a3d414eb8927fb078f76cb9c281311c7831bf123076ed93a2def34d4ce28726d42e6a95dcd5ff3d44eb8acc2434276722607a1148f9
SSDEEP

192:BBxQ/BH32kl1c04CEqp9KAZOL8xXdZff/tXATmXW:vOmkl1c/S9KAZOopf/tX2e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
253872e6042dfd5259b9c38d7e817221_JaffaCakes118

Files

253872e6042dfd5259b9c38d7e817221_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e348a77061770af3c6ba65161e7558e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
CloseHandle
CreateThread
lstrcpyA
ExitProcess
lstrlenA
SleepEx
GetTickCount
GetCommandLineA
Sleep
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA
QueueUserAPC
IsDebuggerPresent

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE