4542bd0175f8fedc308f12c04e35cf1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4542bd0175f8fedc308f12c04e35cf1b_JaffaCakes118
Size

8KB
MD5

4542bd0175f8fedc308f12c04e35cf1b
SHA1

2f44fa704a2460db2bfa7409e28020aa4b71dc6d
SHA256

d7b73394c587e2fade20dc4074a8f426ee79f8a6fd4f687cd637cb4b7d4eb15a
SHA512

7099751b6f5096f99123d61c9a9541809af306f4ec01b227a4ad931727b70c6150cd1b8995feb48476fb92ee3887d9d7514f52ca405c80b89ffb62cc61a006df
SSDEEP

96:5qn4eEzQcU8PWrMFXZ9Su8rRTxs4p+r7aXB8Zy3daua9ZBcdkTeh6:5qDcXPWrQXZ9SlRxs9Efzh6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4542bd0175f8fedc308f12c04e35cf1b_JaffaCakes118

Files

4542bd0175f8fedc308f12c04e35cf1b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

e9ce7384f8dfe4890561d6b65e6887e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
GetEnvironmentVariableA
Sleep
GetLocalTime
SetFilePointer
CreateFileA
lstrcpynA
GetTempPathA
CloseHandle
WriteFile
lstrlenA

user32

IsWindow
FindWindowA
wsprintfA
wvsprintfA
SendMessageA

Exports

Exports

_TixHandler@8

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ