a6535d5fb253ab71eb6f224e05a10db9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6535d5fb253ab71eb6f224e05a10db9_JaffaCakes118
Size

34KB
MD5

a6535d5fb253ab71eb6f224e05a10db9
SHA1

4b2e6a157328d6c60b3120c68318202f2b00c15c
SHA256

3907ecdca6ac8ae740937d249a147c8fdf1bef61e14574c01515621eca7dff62
SHA512

27660d4d9f22bad1d7cbde6f9fa21bcb9306825b2c1ff7c3677dd2b8499991c52049b58f34dcdae5a4b74d3e8e140b82f182545b6ffa574cd3c36870c879ace0
SSDEEP

768:BYpwS8AResSC/WwKNYwMssNkPe6ORVjoWrX:BIsqSTrNY6e+ORVjoWrX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6535d5fb253ab71eb6f224e05a10db9_JaffaCakes118

Files

a6535d5fb253ab71eb6f224e05a10db9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4ff4e9520d2b9d618be12fecec0c0ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA

lz32

LZCopy
LZOpenFileA
LZClose

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ