340fbca0346a6a8b0c100cb6cff7b1b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

340fbca0346a6a8b0c100cb6cff7b1b2_JaffaCakes118
Size

10KB
MD5

340fbca0346a6a8b0c100cb6cff7b1b2
SHA1

1b7104cf39843f6af29130e0bb581e64f3c18428
SHA256

24c4d24a60378c5caa620e42335c8a28253de4beabb97e162ee9344554e9ebd1
SHA512

4ec7ca3caeda0919e0bb77e19ab62d3b8bd030bb2552ec9d15e8b41ce03f87d15d63337f00447b3c9615ade48fb3c7a62e37a43ece417771e2ca0c0a7a6a2000
SSDEEP

192:YXhMY9lBZzTQK6fysDTuTcY3IMKCXsCzOqdhVG3oFetuIDuuuuuuuuuuuuuuhuut:YxMY9lcKsTuTctMfcCzOqDV/8tuIj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
340fbca0346a6a8b0c100cb6cff7b1b2_JaffaCakes118

Files

340fbca0346a6a8b0c100cb6cff7b1b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e4fe6bae823ade604a2e315911afef7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

SizeofResource
SetCurrentDirectoryA
CloseHandle
CreateFileA
CreateFileMappingA
CreateProcessA
DeleteFileA
ExitProcess
ExpandEnvironmentStringsA
FindResourceA
GetCommandLineA
GetFileSize
LoadResource
MapViewOfFile
ReadFile
ReadProcessMemory
ResumeThread
RtlMoveMemory
lstrlenA
Sleep
TerminateProcess
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtectEx
WinExec
WriteProcessMemory
lstrcatA
FindClose
FindFirstFileA
FlushFileBuffers
WriteFile
GetModuleFileNameA
GetModuleHandleA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 974B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE