6411e22615ddf0f6723eda734a5f4a7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6411e22615ddf0f6723eda734a5f4a7d_JaffaCakes118
Size

174KB
MD5

6411e22615ddf0f6723eda734a5f4a7d
SHA1

1a17dcf23809b8d085a05a4b2e1d90059a6ea102
SHA256

f97ca67e7a048588bf8330405b511eb914f80841263297005f2dd7586ea60db3
SHA512

80afdcc5eebfb439035755bbfb4f1ec73a6de3a4255a36977421f6925496bd603772d01e923a40c2111809570a5f8fdd324e52a342f7ad28ba2cc91367cc52eb
SSDEEP

3072:4LnTTdvx8r5aLGyAcx0f/rDLmoeqLYd0XS2aynsaVMRoott06P7a6R7s0:YnPdveV7jcSfjudKQ0XSK/V3uPVw0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6411e22615ddf0f6723eda734a5f4a7d_JaffaCakes118

Files

6411e22615ddf0f6723eda734a5f4a7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4ff4e9520d2b9d618be12fecec0c0ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA

lz32

LZCopy
LZOpenFileA
LZClose

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ