644e8b54d5eddebf405b37d62ffb7920_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

644e8b54d5eddebf405b37d62ffb7920_JaffaCakes118
Size

75KB
MD5

644e8b54d5eddebf405b37d62ffb7920
SHA1

545edda8ef944a671101b50f69246285da1dd17a
SHA256

657460c354a8723a97bd0feaa70539d031ec5cdf49d654a4d1a3bd63b3f62877
SHA512

e44537336e4ba85e227a6a1bcce319321b6473c396d8b40b4f653b28cfacd8f1ed820b70373e3f23deb17f06b9458f07878c15bb9e181fdd4736816010a6512f
SSDEEP

768:24uo6pvE6AbHqbmeB7YOsJJYnVudZ1wFnToIf1DTH0oAxIb:DYaHqbmcUOsJMyZ1wFnToIf1UoAu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
644e8b54d5eddebf405b37d62ffb7920_JaffaCakes118

Files

644e8b54d5eddebf405b37d62ffb7920_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e779296cb76d2c9a706da5d5e9322b30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetCurrentDirectoryA
GetTempPathA
Sleep
MoveFileA
FreeResource
SizeofResource
LoadResource
FindResourceA
ExitProcess
LoadLibraryA
CreateProcessA
DeleteFileA
GetCurrentThreadId
GetStartupInfoA
GetModuleHandleA
GetProcAddress
GetVersionExA
GetSystemDirectoryA
GetSystemInfo

user32

FindWindowA
PostMessageA
GetMessageA
OpenDesktopA
SetThreadDesktop
wsprintfA
PostThreadMessageA
GetInputState
SetProcessWindowStation
OpenWindowStationA

shell32

ShellExecuteA

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_controlfp
_except_handler3
_initterm
__getmainargs
_exit
_XcptFilter
exit
_acmdln

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ