745fad0656695ce2cb44649bd6e72314_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

745fad0656695ce2cb44649bd6e72314_JaffaCakes118
Size

11KB
MD5

745fad0656695ce2cb44649bd6e72314
SHA1

ba79845e2affbb1e33cdcbbcd72b2d23b26d30dd
SHA256

d63dc90a55d5389775be173cee84d25275c7fc7834cbb0aa7f5a8cb7fe90b649
SHA512

0dcb384b6d8d2101667710517bc9f1cc5d9fd5cce7d3b98bc26af8c60ae490d0a2e670592bcb5f025eae79e3f855fe78a059d56d1cccb7bcd2baec07b75a2fca
SSDEEP

192:Dd0H0G6wUqG9wyV7SM4o4feeEEZpaH7by0JVigvE373:DdqxjUqG9/7TweUpGPyexvE3z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
745fad0656695ce2cb44649bd6e72314_JaffaCakes118

Files

745fad0656695ce2cb44649bd6e72314_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ