94920ce66350ad32a4ccac35af8da271_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94920ce66350ad32a4ccac35af8da271_JaffaCakes118
Size

8KB
MD5

94920ce66350ad32a4ccac35af8da271
SHA1

9028bae54608b079f64ee2d5bb2dde4ec1598555
SHA256

277a46413b55a53b1ade11b7a5a5cd534192918b6d3962eaa9ebbc600fa0b13a
SHA512

d56552a7d32b36c2e9b23626cb0471e20289df77dc4262194ef53721aa29217780d257bf5a31afe07269568a35faa2bdd6f92bea08182988ffcb09f8d6858e6a
SSDEEP

192:R0H0G6wUqG9+yV7SM4o4feeEEZpaHWdru:RqxjUqG997TweUpGWVu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94920ce66350ad32a4ccac35af8da271_JaffaCakes118

Files

94920ce66350ad32a4ccac35af8da271_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ