69aa8604a19244180b0e14515f1e3ed0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69aa8604a19244180b0e14515f1e3ed0_JaffaCakes118
Size

24KB
MD5

69aa8604a19244180b0e14515f1e3ed0
SHA1

45ed4f7e4f39f730e33b3a3e34e8d5248650b315
SHA256

960a1fff5be03528793cbcdc4c8cc5b5e0747ecde9dbd0beb47fd366ca5acb9f
SHA512

c94b6ce3b8d336f6f8e2008512053236525e3317ce627c54c9bb7753bcccc640299dbec3bf226e458e2b1957c72cfcad8cd078bff6007eb0502c07f12adae0ea
SSDEEP

384:Cxd94JhWDbCW/8AoWHcgR2lpaQFxH/f4kVdjaLacmkC0GJsJxXSdqWoZDEWA:e0hWDboA9AaQFxfftjaLacmkLGKddm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69aa8604a19244180b0e14515f1e3ed0_JaffaCakes118

Files

69aa8604a19244180b0e14515f1e3ed0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13c956d8314201a9840987db38751607

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
WinExec
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA
DeleteFileA

user32

MessageBeep
GetMessageA
MessageBoxA
wsprintfA
TranslateMessage
DispatchMessageA

msvcrt

_except_handler3
_stricmp
atoi
strrchr
_itoa

netapi32

Netbios

Sections

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ