8564029f2b8d09fd802dbb0a90e946c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8564029f2b8d09fd802dbb0a90e946c9_JaffaCakes118
Size

22KB
MD5

8564029f2b8d09fd802dbb0a90e946c9
SHA1

d478635a3fd37d077b257793b4f985e51bba7086
SHA256

1534426b1c2d21e852ca9637fb5cd3ef2a5638a76463cd4b9da6ad37da55ae58
SHA512

d95da9b22e0882d8b7430a68de5c23e1de10c0c3542a3db4592a56a003b998a3583ad3a976eabd0fc59005c0260b1b2944c3767cbb404e4391e2400c054e44af
SSDEEP

384:O6/N+wDQxPzPVygNPo91RTcXxuk2wLPikShLvRRBVAdiqbj9155jwkoS:NxcN7V79o9jcXgk2wLgrVV4iq/97mS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8564029f2b8d09fd802dbb0a90e946c9_JaffaCakes118

Files

8564029f2b8d09fd802dbb0a90e946c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ec3625e9a2dd28e5592c2488e09e51b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
FindResourceA
DeleteFileA
CopyFileA
lstrcatA
lstrcpyA
LoadResource
WinExec
GetModuleFileNameA
OutputDebugStringA
TerminateProcess
ExitProcess
CreateFileA
LockResource
WriteFile
CloseHandle
Sleep
lstrcpynA
GetWindowsDirectoryA
GetCurrentProcess

user32

SendMessageA
FindWindowA
wsprintfA

advapi32

RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegCreateKeyA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ