821bd45c165328aac7505072eacef537_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

821bd45c165328aac7505072eacef537_JaffaCakes118
Size

6KB
MD5

821bd45c165328aac7505072eacef537
SHA1

c3e9f3f6b6503a87baa89926788aee015c6252f7
SHA256

977966b3153b6e9ab70faac643dc102ee6ff0ffc79744fe4f3a15db57e2ef9f7
SHA512

55b72b837d5148ba9461a270b452dc854a28278c808092ada49e2a1f04735f090381a800a2baa7ffc34b228bc280c07c8f95036aca2097bea68325d749c687aa
SSDEEP

96:G36fISTIS4Adz1zayzQlXUr/H/KmUiaq6OM2OquSlSZS+zoxanzaxVa/aSsSOSj2:QYIQIKdp2yElo/C6x6Px7KwNIGziVeYv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
821bd45c165328aac7505072eacef537_JaffaCakes118

Files

821bd45c165328aac7505072eacef537_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a52d2693dd6f8df968388a96deb7910

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
WideCharToMultiByte
lstrcpyA
lstrcatA
CreateEventA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
ExitProcess
WaitForSingleObject
GetCommandLineA
SetEvent
CreateThread
CreateProcessA
ExitThread
CompareStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
GetFileAttributesW
SetFileAttributesW
WinExec
GetModuleHandleA
SetFileAttributesA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

user32

CreateWindowExA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
PeekMessageA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE