47041d5dcc4d338b094f77df63c74b00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47041d5dcc4d338b094f77df63c74b00_JaffaCakes118
Size

6KB
MD5

47041d5dcc4d338b094f77df63c74b00
SHA1

9c321256dd2620a4c8399e6bbc50a9ad980e4c6f
SHA256

c2ea739227b829eb8af840e739359ff885da426e41dac8a4114ef4398ed50ec6
SHA512

4080ea9aa50cd22d7e8923437e64a99a7aad8d839c79b56a70070a90649f8eae840d37b0b6c4d7d3398c7a6d9854fe5cef59f76afe59874f6a23945792d844cd
SSDEEP

192:edVHlfCiP2yk0xcQ1hycZ4leVip/hftaEaXcui:OlfCiP22xcQ1hycZ4lQip/hfUcr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47041d5dcc4d338b094f77df63c74b00_JaffaCakes118

Files

47041d5dcc4d338b094f77df63c74b00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8a5666f6bd82bb380050f282215cd5ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObject
CreateEventA
GetCurrentProcessId
SetEndOfFile
ReadFile
SetCurrentDirectoryA
RemoveDirectoryA
GetProcessHeap
lstrcatA
GetSystemDirectoryA
WideCharToMultiByte
CompareStringA
CreateToolhelp32Snapshot
Process32First
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
SetEvent
CreateThread
ExitThread
GetTickCount
CreateProcessA
Process32Next

user32

GetWindowLongA
AnyPopup
IsWindow
wsprintfA
DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE