8e5203a5c1e0638e044457334b0f753b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e5203a5c1e0638e044457334b0f753b_JaffaCakes118
Size

5KB
MD5

8e5203a5c1e0638e044457334b0f753b
SHA1

077186a15abd1c24301eb4c49da38409b75b3618
SHA256

56477ceedc545e58b64642857642cbd54eb85d7bad8b9259a281259b57f6980b
SHA512

f7185ee5bb1f7d1c5f91e5465ad03cc485713c7448f374802caaf298d63e43dc64ff2282e757d5f9e75cbe7963d5381ec0f6369eb67c1515d718b01a5abb8eb7
SSDEEP

96:s3Wjb3bjalxbzbziFbqmDF1WAJbM3ZAPIP9Hci:SSLjuJnu9qAF13JbGZAPIPRci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e5203a5c1e0638e044457334b0f753b_JaffaCakes118

Files

8e5203a5c1e0638e044457334b0f753b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70d68b0de9b6dbca506ead8335079a27

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
CreateToolhelp32Snapshot
Process32First
lstrcpyA
lstrcatA
WaitForSingleObject
GetModuleFileNameW
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
Sleep
ExitProcess
GetModuleHandleA
GetCommandLineA
CreateEventA
SetEvent
CreateThread
ExitThread
CreateProcessA
Process32Next

user32

DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA
CharUpperA

advapi32

RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE