65a8ae63eb39aa7699fcfe29db7a30ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65a8ae63eb39aa7699fcfe29db7a30ac_JaffaCakes118
Size

26KB
MD5

65a8ae63eb39aa7699fcfe29db7a30ac
SHA1

cab7fe6010a45b17f6a0d36b0e6966b129ecc986
SHA256

46c85a256bd8d9dcf01f5ee80aabf598d91d9b89279182653486a9e12899ef6e
SHA512

faaf0487269928856d75c4ed8af8315cfd1080484b222c46503e9a74dcd90187b043860a5c175847f5c6bb7e7ca4541582bc81551ebdd41598e3ea601ab31798
SSDEEP

384:rlxM9Iv76z12Qf41sJFSEh7GzInz808tUU6wqdSGgIbez5Jo8CGqP5vXWvwWlz:TM966h2lsJXh7GEY08tOdZgIarCp5vc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65a8ae63eb39aa7699fcfe29db7a30ac_JaffaCakes118

Files

65a8ae63eb39aa7699fcfe29db7a30ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7345f9497130be252852f565608edfb2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetTickCount
GetTempPathA
Sleep
GetCurrentThreadId
ExitProcess
GetProcAddress
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA

user32

PeekMessageA
PostThreadMessageA
wsprintfA

Sections

.text
Size: 1024B - Virtual size: 663B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ