407bc06843dcd62ccef579c1aa43b038_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

407bc06843dcd62ccef579c1aa43b038_JaffaCakes118
Size

88KB
MD5

407bc06843dcd62ccef579c1aa43b038
SHA1

168d417a08ccf2dcaae28aa821dedac3eed57fcb
SHA256

ce117ae71e44575645e11fbcbaa81021c387a7bccc38ed936eb481aa1c6fb0f4
SHA512

9ac6efc0f0cc17c2b904fa4626f32908a72a4aaa3379f49d0e3b1040e8ea48162cbd855155cc2e4aa073b0cef1c400ea56c2fa14d6b818546259d670e98cb0dc
SSDEEP

1536:GAe1I+rTSxztdkarj6EwDimueSkrKYhatJy54FD:GAe11Ss4wlXSkrB+y54FD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
407bc06843dcd62ccef579c1aa43b038_JaffaCakes118

Files

407bc06843dcd62ccef579c1aa43b038_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32a16cb3dfd7832b488e7a63b90be4a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CloseHandle
SetEndOfFile
WriteFile
lstrlenA
SetFilePointer
CreateFileA
GetModuleFileNameA
GetTempPathA
GetShortPathNameA
GetTickCount
LocalFree
lstrcatA
GetSystemDirectoryA
LocalAlloc
ReadFile
GetFileSize
GetCurrentThreadId

user32

GetInputState
MessageBoxA
PostThreadMessageA
GetMessageA
wsprintfA

shell32

ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ