42a1b5a1a7b37785a35b63ac702bc158_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42a1b5a1a7b37785a35b63ac702bc158_JaffaCakes118
Size

25KB
MD5

42a1b5a1a7b37785a35b63ac702bc158
SHA1

ebb29698f4c482b0aaf4f678025b2da643a2b1df
SHA256

9e91b90597e10abbd7af63332a635c431f520a9967f7e51aea9227bff6cb64cc
SHA512

632adfe4ad6b8fcd242fde2157bb1c45607671c3c25eba4e9c02ee3bc63358bed76106d01cb5dd0b140b612e950b203288326651a8fb7233b11db649302b66d3
SSDEEP

384:0viYpwbMboZCreb/RM1/MluJ2zqeDS460oJhCaIQbN3tc5GzHaJOITql:9Ypwwe/pEHaqe2J0khCaIQbN3IG2Jrml

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a1b5a1a7b37785a35b63ac702bc158_JaffaCakes118

Files

42a1b5a1a7b37785a35b63ac702bc158_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4ff4e9520d2b9d618be12fecec0c0ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA

lz32

LZCopy
LZOpenFileA
LZClose

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ