46bd355107f9dff0fdb4dc432b89c264_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46bd355107f9dff0fdb4dc432b89c264_JaffaCakes118
Size

8KB
MD5

46bd355107f9dff0fdb4dc432b89c264
SHA1

87e8ce598ae8084ab928dc07c95f35229e0506a5
SHA256

5d65a529364c76ad97aeb27170397ae8d68b0c3b836e83787482e3cb6175710a
SHA512

8422a6dfe3ab94ae3f578626889c4c91b2a4c0608cd9a0c65752ee434d69dcdb4c55d435325de791799dbfba9fe2e131b6e2c4eb0ed0eed354fe6b5ff47f8db9
SSDEEP

192:N0H0G6wUqG9wyV7SM4o4feeEEZpaHawdpT:NqxjUqG9/7TweUpGawdJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46bd355107f9dff0fdb4dc432b89c264_JaffaCakes118

Files

46bd355107f9dff0fdb4dc432b89c264_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ