5a5a4dd0867abf0b7a72b3e9c194f90f_JaffaCakes118 | Triage

Sharing

General

Target

5a5a4dd0867abf0b7a72b3e9c194f90f_JaffaCakes118
Size

10KB
MD5

5a5a4dd0867abf0b7a72b3e9c194f90f
SHA1

b192fbbef12612675737dfb614e0a67f6d05962c
SHA256

805a96ccf20fccc3bb0c276244091955076201ceeaf83927182be54aa88da73d
SHA512

ff9311b9dcf69dc1db6565d0a147792b916073ea4292e287dc9fde784fd9b4a67f0a656c98f9d75877ec32945b499b4d1f1c0998133b1b83d9f10b355a2ac182
SSDEEP

192:mOm/OjA6aG+0/hnjs1clQ3BAT8YLW/8AoWEzm/O/:mD6sSuBaW/8AoWBQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a5a4dd0867abf0b7a72b3e9c194f90f_JaffaCakes118

Files

5a5a4dd0867abf0b7a72b3e9c194f90f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

069e549a49dce537bf6436c111d7f294

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
WinExec
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA

user32

MessageBeep
GetMessageA
MessageBoxA
wsprintfA
TranslateMessage
DispatchMessageA

msvcrt

_except_handler3
_stricmp
atoi
strrchr
_itoa

netapi32

Netbios

Sections

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ