85ef54a0a1121c589ce3052497ab1e42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85ef54a0a1121c589ce3052497ab1e42_JaffaCakes118
Size

8KB
MD5

85ef54a0a1121c589ce3052497ab1e42
SHA1

ddcc5d6e5fb0cf9db2f4e1e4d09f6f8bcab11f60
SHA256

e5abee1bbc3c892f0e43f3cc71fe9f5c4fb63a94a98c26bc9835bc95eb832591
SHA512

d30802d6f2561d9b9fa6cf1a0743a6859478ffd528f145da48332fd7c6a9ad9c29f4e13533a43758891b29e901272ba56921871d19e27aca1b93c5e4d9529759
SSDEEP

192:90H0G6wUqG9WyV7SM4o4feeEEZpaHzh5a:9qxjUqG9l7TweUpGa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85ef54a0a1121c589ce3052497ab1e42_JaffaCakes118

Files

85ef54a0a1121c589ce3052497ab1e42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ