48b4cb46cfb2f24919ff56834d649cb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48b4cb46cfb2f24919ff56834d649cb6_JaffaCakes118
Size

222KB
MD5

48b4cb46cfb2f24919ff56834d649cb6
SHA1

01e78aa90954e52c7cb78ed6e1e0dc63471accff
SHA256

21904777e1506c1e00b0f9f4f072a4fb58c59299ecb062cfc4ddf985de90e245
SHA512

1bf67bad21201f717edece7455c2e4646118081f0b652c9e3cfc82698c2605ae7c68d3c425c14aa039853aeb78ba8a5020b6f3cd34f4055d53ac1fde210f4144
SSDEEP

6144:G4gD3DpdRDOu4YRpg4ogh4Fr5cX/vvx/c:G4gbDhDMUgNgh4T8/XC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48b4cb46cfb2f24919ff56834d649cb6_JaffaCakes118

Files

48b4cb46cfb2f24919ff56834d649cb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23bcfd178de7c431ed507ac1eff9396e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FindWindowA
FindWindowExA
GetMenu
PostMessageA
SendMessageA

kernel32

CloseHandle
CreateFileA
ExitProcess
GetLastError
GetTempPathA
Sleep
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 217KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ