7256170aafc67d99c8e40e666e84ddcb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7256170aafc67d99c8e40e666e84ddcb_JaffaCakes118
Size

8KB
MD5

7256170aafc67d99c8e40e666e84ddcb
SHA1

dfa3c630011e2f4dbd540125a4ec37d1109e38a6
SHA256

e962bcf0e8e98315eaf6215e285136a7fcf4b6f0e46a1f628e9ec594a2cee0fe
SHA512

4331952623287a45117f06a77433eeaefa90a386aa101d7da34148cc97b6826c2cdcfda529bdb53d4bf375835fa3ad0bc69254d17dd2c836281aa2f96ac2ac48
SSDEEP

96:j30H0GV2/wUqGhjMyV7nS62sQC4o4fOYyTSzm9izZp43Z9Nj:D0H0G6wUqG9MyV7SM4o4feeEEZpaHj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7256170aafc67d99c8e40e666e84ddcb_JaffaCakes118

Files

7256170aafc67d99c8e40e666e84ddcb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ