4c6263b931cbc2dcf1d0b84fc7562149_JaffaCakes118 | Triage

Sharing

General

Target

4c6263b931cbc2dcf1d0b84fc7562149_JaffaCakes118
Size

53KB
MD5

4c6263b931cbc2dcf1d0b84fc7562149
SHA1

5c8c1cd5266144ff6599d1a5210e379373cd7bf7
SHA256

da6cadf0e3126f1765d6397c4f120f5db1457b748a70760b34778560119e809b
SHA512

9270f1e682425e1e91bddc9e4f24eca922a70832447b173752570bd17b53b49a7d3e32a075328e1246b9a8ec07aec74e7f43075f1da2e993ade72bdd76593f4b
SSDEEP

768:lfiBmNzUtzSf60Hu2NKosrWfKdPZ3y/sI4Av7Xe0o/8gkaZwq3noPWshNjOwCPNN:lf9diGwWfKD3HI/v70wMAWsHODPRR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c6263b931cbc2dcf1d0b84fc7562149_JaffaCakes118

Files

4c6263b931cbc2dcf1d0b84fc7562149_JaffaCakes118
.exe windows:4 windows x86 arch:x86

514c4c1141c3d9d3dcedb42bddd01132

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess

user32

OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu

advapi32

RegOpenKeyExA

Sections

.text
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ