4dedb55830bce81a7b2f8f7deb67d04f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dedb55830bce81a7b2f8f7deb67d04f_JaffaCakes118
Size

24KB
MD5

4dedb55830bce81a7b2f8f7deb67d04f
SHA1

4df2ee42b88173eb830e3bb81f79b83402fc4e5f
SHA256

0c976d3327d5fa6294d5035c1c9a4807a2434e662a0309c5dc45ffa022726a09
SHA512

931701f00adad0a3fe38ca69dbd2d942cdd1113d948ee3085c22375946e242499370cdecf2b6f8f9c388a2dd34a7e707d324cc7f119df781ac1567d8e388608e
SSDEEP

384:iUcVa14JiDW/8AoWtC3heKByw2fcuzd3RI4CzT/jiBrUNWLhDEWb:HmQAH8he4yncWFAjmRt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dedb55830bce81a7b2f8f7deb67d04f_JaffaCakes118

Files

4dedb55830bce81a7b2f8f7deb67d04f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bdf15ef9b320465a64c9c524b87b5fa5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
WinExec
GetWindowsDirectoryA
ExitProcess
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA

user32

MessageBeep
GetMessageA
MessageBoxA
wsprintfA
TranslateMessage
DispatchMessageA

msvcrt

_except_handler3
_stricmp
atoi
strrchr
_itoa

netapi32

Netbios

Sections

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ