888e3a2274b8e3b956135de210a5d19b_JaffaCakes118 | Triage

Sharing

General

Target

888e3a2274b8e3b956135de210a5d19b_JaffaCakes118
Size

131KB
MD5

888e3a2274b8e3b956135de210a5d19b
SHA1

9982ce2c4c5e2c9b391cf04dc3230a8e07c3b4e5
SHA256

22107e51ff3f343da11ec7e9b4425079c5a8855550f89f62cd312e1eb545e1a1
SHA512

55a2ce085c5a50b0b3e5b5818a511c5fe14354414f0703f0f96ba89478dd7f6e064b3abc2be2694e80dd3b4e25bd140ee5cbaa67220c7c80ccb59b1264c54d14
SSDEEP

3072:dbZXFYtIRhkYy2iGA1/5LDngbYq7lPW9H1h4sWFq:7XZyYNiz/54bFliHTh+q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
888e3a2274b8e3b956135de210a5d19b_JaffaCakes118

Files

888e3a2274b8e3b956135de210a5d19b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4ff4e9520d2b9d618be12fecec0c0ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA

lz32

LZCopy
LZOpenFileA
LZClose

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 128KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ