9394ac3af505c654578c19141c195192_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9394ac3af505c654578c19141c195192_JaffaCakes118
Size

575KB
MD5

9394ac3af505c654578c19141c195192
SHA1

cf2dbae58d18b2c65095aebe8578f7f232fe0f14
SHA256

16e5190e6d03869faf6e99b1b7593bcd70fb41b69c75dc6352a068aeaf05667a
SHA512

ae9500aaeec1cfc3035ad4c8e868ca243f8f40c9bffa95a9c9701d2b6421bddfca725326c3659126df4aaf42d601252d23219411872f360e6da78c03b28343cc
SSDEEP

12288:6zKTrqiljn+f3It/RGSM8rTThHLqBM/kGxdwGtx741XB8:rn63IZRGz8VrmM80Pxc1XC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9394ac3af505c654578c19141c195192_JaffaCakes118

Files

9394ac3af505c654578c19141c195192_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e14be990071bdc439fe07220ed519a38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess
CloseHandle
Sleep
CreateFileA
WriteFile
DeleteFileA
CreateProcessA
ResumeThread
GetTempPathA
lstrcat

user32

MessageBoxA

Sections

.data
Size: 574KB - Virtual size: 573KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE