3267a27b3ba2101c3b2e8ec423f88d15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3267a27b3ba2101c3b2e8ec423f88d15_JaffaCakes118
Size

36KB
MD5

3267a27b3ba2101c3b2e8ec423f88d15
SHA1

70d36b12286cfdfe688265deb6b74b12e978ae45
SHA256

2b8837419474d896088c63fc5550037497141e2317120bc8629ee07e80efb1dd
SHA512

a0a432e6e043d4eab6ff98fecead0ff9b1fb532c9779a1f15c286ed55a24148fc1e2fa5fd863956022fc8f6bbb1df1f57c59f7cb9f4f5505f9d54335cba46fdd
SSDEEP

384:J+0KCyi3T5y/5aZs2UHC6VVQJOMZYcZLRVHQD+OrPwKMb3CirbmDaqg:J++L3Tecs7HCtJBtZLnwpPBMDCiuaqg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3267a27b3ba2101c3b2e8ec423f88d15_JaffaCakes118

Files

3267a27b3ba2101c3b2e8ec423f88d15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc74232609a1d0a1982fddc4f341d745

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
SetFilePointer
GetFileSize
CreateFileA
GetModuleFileNameA
WriteFile
GetWindowsDirectoryA
Sleep
LoadLibraryA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
ExitProcess
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

shell32

ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE