48e08261e019fadc938dddbe8d45a5a6_JaffaCakes118 | Triage

Sharing

General

Target

48e08261e019fadc938dddbe8d45a5a6_JaffaCakes118
Size

23KB
MD5

48e08261e019fadc938dddbe8d45a5a6
SHA1

9500e54be5f2332da323152f62640bce28e01a1d
SHA256

96451572d285dea4bda59ef101051111b1edfd3fa7b6b1c6bb5d56f64806caf4
SHA512

b8ceb8189e5280688302a4b9b38aaad784d45d1266157bf7dd5a9e251e332eb4a9a98c3466783715f6e8f86bd0863e247be3ae53aaaf6522e3e9a739db637425
SSDEEP

384:Jge4wJWpRTyYcyEAINGryORtAO2kxFRmyASoSw1yHfsTNawQXlnyj8BEJnhYznsd:O3mSRTyYcyEAI6yORtAO2krRmyASoSwp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48e08261e019fadc938dddbe8d45a5a6_JaffaCakes118

Files

48e08261e019fadc938dddbe8d45a5a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bdbbb090217f204019432547314ea1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
lstrcatA
GetTickCount
GetTempPathA
Sleep
GetCurrentThreadId
ExitProcess
GetProcAddress
CloseHandle
WriteFile
lstrlenA
CreateFileA
GetModuleFileNameA
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA

user32

PeekMessageA
PostThreadMessageA
wsprintfA

Sections

.text
Size: 1024B - Virtual size: 651B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

tttt
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE