94071bf02b7fb4e00da5fb6b99b57f02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94071bf02b7fb4e00da5fb6b99b57f02_JaffaCakes118
Size

10KB
MD5

94071bf02b7fb4e00da5fb6b99b57f02
SHA1

73d2f12a62f68216077913379b60623514ca7f54
SHA256

04d2020052de1a07ac5c476fd3f982479ce688e52669b2d1f52ce61326244679
SHA512

13e6ec3b857704caec35a0e0455b96d8c47bd62417c9119bac80c54d91fec9ed52cbf1c11c8e0545121a63932dd6a69f5f3349d981615a0a86d0aadece5ff9f7
SSDEEP

192:REe0kG6wUdSG9SyV7SM4o4feeEEZpaHXUoxcsbhK2+72WW2dMf:vkjUsG9J7TweUpGXncsbhK2+72WWec

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94071bf02b7fb4e00da5fb6b99b57f02_JaffaCakes118

Files

94071bf02b7fb4e00da5fb6b99b57f02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a89df733bb5264dcce0501a85aba08b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

GetForegroundWindow
MessageBoxA
LoadStringA
wsprintfA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ