947ebdd74b603e0a467249f67507b3b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

947ebdd74b603e0a467249f67507b3b4_JaffaCakes118
Size

56KB
MD5

947ebdd74b603e0a467249f67507b3b4
SHA1

35fd2dfa29bc880e2a8c353a9a35a0e875e391da
SHA256

eb684583c02b8b4a6a4718dc870df0925661ce1b6a53c9b4c1b2390466720297
SHA512

141259836d7289649638976e602bf0a71d2f7ce504bff372e6f38b8e03891d38428d064bc2c4d9ccacc262f99fb4dba5c5ad67f334cc5910445ce5509fcd1ead
SSDEEP

768:nn/oYXOd1q9WdEIN4Y9asfG4epa2mNsNMvb6jo4H+m0SNfI/xmZJmjJI3KL4zKyo:nn/oYXOOWdNN3N2ms+2jzH+skoKL2tS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
947ebdd74b603e0a467249f67507b3b4_JaffaCakes118

Files

947ebdd74b603e0a467249f67507b3b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1b1d470695815e5d2859c5f33b4954e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
FindFirstFileA
FindClose
FindNextFileA
FreeLibrary
HeapFree
ExitProcess
HeapReAlloc
HeapAlloc
Sleep
lstrcpyA
GetProcessHeap
GetProcAddress
LoadLibraryA
GetLastError
lstrcatA
GetModuleHandleA
lstrcmpA
GetModuleFileNameA
GetCommandLineA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ecode
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE