8d741f82b8b0922e4ba8f4436f3563aa_JaffaCakes118 | Triage

Sharing

General

Target

8d741f82b8b0922e4ba8f4436f3563aa_JaffaCakes118
Size

5KB
MD5

8d741f82b8b0922e4ba8f4436f3563aa
SHA1

058c8191a8ae79935ef321fe329cc6011e404c84
SHA256

64b466001c2e0f5828549e4baa1862f448663b7c93c48ef4f93aa390226547c8
SHA512

01df45cb74cc4451b841ca621a025f48b77690daaeed1cfe6d08ba13e8895f8cff261fee57ca3ba1223ddd3c1e36a629b9708eff4b6e409388591405a71e1355
SSDEEP

48:K4c4kQGJeM9f5zvxGx+M6dN4/RH00ml1WiIZJvX2FvcM2ZI3hBE1Lzmi:jw79f5zQYddNARH0PlM3BQkrIx6xmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d741f82b8b0922e4ba8f4436f3563aa_JaffaCakes118

Files

8d741f82b8b0922e4ba8f4436f3563aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61aceb3351718c9a26b7c832bfd97fa5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrcpyA
WideCharToMultiByte
CreateEventA
CreateToolhelp32Snapshot
Process32First
CompareStringA
WaitForSingleObject
CloseHandle
GetModuleFileNameW
GetFileAttributesA
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
GetModuleHandleA
SetEvent
CreateThread
GetProcAddress
ExitThread

user32

BeginPaint
ShowWindow
DestroyWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE