6a8374878ffc49b282d37838ea6ed29f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a8374878ffc49b282d37838ea6ed29f_JaffaCakes118
Size

23KB
MD5

6a8374878ffc49b282d37838ea6ed29f
SHA1

93c6186c6c4730c281edd56522790f090443bdaa
SHA256

2cbf614bbaec824385944d525718e858472b1e2e64eb3ee3f13759ee4f00d8b7
SHA512

2c64951bf96555420b08cfccbc44612b3cd64986babc8f7ce5feab0c63875e21fde4aa7b53070dd29ffdc8669d4436fd80c05c5d811df314abc16a0ea9e1b903
SSDEEP

384:mDqsSuBaW/8AoW2eLXVBYkkjuv1hkNLdbaLa4CwUJuUCSFCJWe8EDEWW:kiAIEVBxkjuv7wbaLa4PU48IM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a8374878ffc49b282d37838ea6ed29f_JaffaCakes118

Files

6a8374878ffc49b282d37838ea6ed29f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

069e549a49dce537bf6436c111d7f294

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
WinExec
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA

user32

MessageBeep
GetMessageA
MessageBoxA
wsprintfA
TranslateMessage
DispatchMessageA

msvcrt

_except_handler3
_stricmp
atoi
strrchr
_itoa

netapi32

Netbios

Sections

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ