716fdc500a818e9458604c6faf6e5fb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

716fdc500a818e9458604c6faf6e5fb6_JaffaCakes118
Size

6KB
MD5

716fdc500a818e9458604c6faf6e5fb6
SHA1

0b5ac6fb68869134f3947cc43c640bfc2cba61ed
SHA256

5c427d2bbd839a97a12132a97e950f0ed2d2c74559cd78fb75e8feee035a88d7
SHA512

f4cf453d91e3eec8a60306e865615f9d21a9c0cc805de2812f746a801cbfe22498ae48809d9f5d65089eee3e0fc50cdf2940767115bc3c512593e3bad4d21435
SSDEEP

96:/NsEyeFXoGeIrDuP0Nt02zati4BBwhGtNR:/NEcYGeIH7Vj4BBcw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
716fdc500a818e9458604c6faf6e5fb6_JaffaCakes118

Files

716fdc500a818e9458604c6faf6e5fb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1584a88d2eece9d3139d59b0f8090fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strlen

kernel32

GetModuleHandleA
HeapCreate
GetCurrentThreadId
HeapDestroy
ExitProcess
GetModuleFileNameA
DeleteFileA
HeapAlloc
HeapReAlloc
HeapFree

user32

GetInputState
PostThreadMessageA
GetMessageA
CharLowerA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.code
Size: 1024B - Virtual size: 615B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ