84fc8ad8c42b9f8aeeb181c913e04f6f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84fc8ad8c42b9f8aeeb181c913e04f6f_JaffaCakes118
Size

33KB
MD5

84fc8ad8c42b9f8aeeb181c913e04f6f
SHA1

48d5cc4da6a8864fc943ab6396d8636dd9bf8193
SHA256

b524d0164ee2bb73373693d66665dcfae023cc28f1c694e19cf9d0a679466d50
SHA512

cdc7c5090f54c0c6d2c4dc14c0fd34edc0acdb9ef9ee36388a5d39768557d6e84a95ecc1bcbd9ee2a50afae12b1227765adc956ce52845eaf1b7cb3757d1f001
SSDEEP

384:GrhmY9fYdVRlU64VqI5kaE9e2CcLr+zYwr2mb7/6ogFCQCsnOIgsvWAh4yCJap4i:GVedH94A0k0rQOzr20gcTIgmWEFSv0f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84fc8ad8c42b9f8aeeb181c913e04f6f_JaffaCakes118

Files

84fc8ad8c42b9f8aeeb181c913e04f6f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85878cb695e267707beb846b64cd71c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetTickCount
GetTempPathA
Sleep
GetCurrentThreadId
ExitProcess
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA

user32

PostThreadMessageA
PeekMessageA
wsprintfA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 653B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ