716c7e7d65eb00b2d715ffe2bc9a39d7_JaffaCakes118 | Triage

Sharing

General

Target

716c7e7d65eb00b2d715ffe2bc9a39d7_JaffaCakes118
Size

281KB
MD5

716c7e7d65eb00b2d715ffe2bc9a39d7
SHA1

0d346238a2930666d3ee40ac96687ea7c43adcf2
SHA256

d4173e6916d9acf577b6c4fbf9946cce4b2fa15b5c0cb30034b68aea647015c5
SHA512

0b20fa732cdafd2d8e511328f88974d517fd886afef4cab4a25cb26bbb0a588360e433b04180597914b007f23f3ee5c2f295e6bd01bd428b8917d7f2e5ba4976
SSDEEP

6144:VS2ZsxHWugIcdIx0+heBo+iqgn3OzDsvJVC76teXiLiP9:82ZsxHFgn80+qhf2YIT3iP9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
716c7e7d65eb00b2d715ffe2bc9a39d7_JaffaCakes118

Files

716c7e7d65eb00b2d715ffe2bc9a39d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff7385e98915e4a74953bfa3432018ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

shlwapi

StrStrA

kernel32

lstrcpyA
lstrcatA
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetProcAddress
LoadLibraryA
LoadResource
LockResource
SizeofResource
Sleep
WriteFile

comctl32

GetMUILanguage

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE