a8ca4f1fc8c31afcd95e945dcc0c1da8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8ca4f1fc8c31afcd95e945dcc0c1da8_JaffaCakes118
Size

5KB
MD5

a8ca4f1fc8c31afcd95e945dcc0c1da8
SHA1

955698aff72de9959dcbde8e85ce2964820d7128
SHA256

9fd5709268eb57938d745a52d43ce45ae25f0eb4faf8bda3fb4b238b4e74569c
SHA512

26333a71ab94c3f01b440a2659937e47c7b9a16e935dec3eae7ac13347a13703475d4147009e5507effd14b96900e4da368dcbd9fabf5b9b6181407246e6cc7a
SSDEEP

96:Vdb8FqMvx93Ftr5YtiStMnlttyHV+pSPEDFaKBkTDmwtCt8tipMEHui:svx91tr5Yt9t0ltE1+pSPEDFa8kTDFtY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8ca4f1fc8c31afcd95e945dcc0c1da8_JaffaCakes118

Files

a8ca4f1fc8c31afcd95e945dcc0c1da8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5749d87c0d1a8536729f18859b7198ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
GetCurrentProcessId
GetCommandLineA
GetWindowsDirectoryA
WaitForSingleObject
GetFileTime
lstrcatA
GetSystemDirectoryA
WideCharToMultiByte
CompareStringA
CreateToolhelp32Snapshot
Process32First
ExitProcess
GetModuleHandleA
SetEvent
CreateThread
ExitThread
CreateProcessA
Process32Next

user32

GetWindowThreadProcessId
GetTopWindow
IsWindowUnicode
wsprintfA
DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE