766b80283df68716ef9861f3f909ba02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

766b80283df68716ef9861f3f909ba02_JaffaCakes118
Size

8KB
MD5

766b80283df68716ef9861f3f909ba02
SHA1

7d82f6f857abdd759e1ff26413aef83c50d37689
SHA256

79c9cbe72792f836d27d0a16a30d6cbcae2d086ea26cc4242bfcecdf66c672a5
SHA512

022967c7587f7b34f6cd48143429925da6da8e4d46886ba37d6e4d5b6157aaeec9dd002282a4d14fe8cf6f3f2fa3990a9a3bbabcbe743e7ef182d80817e8ec7e
SSDEEP

192:xege+PcXQYl3+913Fbqbz1n8IMlhPQVyIsWf/DCWP:YbUcX7l3dqQVy5Wf/DCWP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
766b80283df68716ef9861f3f909ba02_JaffaCakes118

Files

766b80283df68716ef9861f3f909ba02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

afc527476e22079cb267baa1ed369999

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateThread
GetSystemDirectoryA
GetTickCount
ExitProcess
GetLastError
CreateMutexA
lstrcmpiA
lstrcatA
GetModuleFileNameA
FreeLibrary
GetCurrentThreadId
GetProcAddress
LoadLibraryA
GetCurrentProcessId
lstrcpyA
CreateToolhelp32Snapshot

user32

wsprintfA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
PostMessageA

msvcrt

_itoa
_except_handler3
fopen
fgetws
fgets

Sections

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ