aaf512793a5ef4139633563a49846c3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaf512793a5ef4139633563a49846c3c_JaffaCakes118
Size

46KB
MD5

aaf512793a5ef4139633563a49846c3c
SHA1

49736c4706da098f709b537d915117d794ed3d68
SHA256

fb390bb8fc9018ce926d652c1d22c45c81b4c1b1a406904241284cc329ffccac
SHA512

d9f04bd6716e373be030d7522cf5dbd0a164b1d63595454dcc1f1c00620733af4dd2345e47acec5e0720511dbba14ab3a34ff2e055832b37720d4bea08564aad
SSDEEP

768:k5i5KHbZOOqIOd/HJN37coyUEwKHfOS7o5Dn34vdlI4Oab+0WRY:2tcoOhN3rzEwKHfOUoKI4OayHR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaf512793a5ef4139633563a49846c3c_JaffaCakes118

Files

aaf512793a5ef4139633563a49846c3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98a69844206843ea2ec548299f92e52e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
Process32Next
lstrcmpA
CloseHandle
Process32First
CreateToolhelp32Snapshot
GlobalFree
WriteFile
CreateFileA
lstrcatA
lstrcpyA
GlobalAlloc
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
ReadFile
GetFileSize
GetProcAddress
WinExec
MoveFileExA
GetEnvironmentVariableA
GetPrivateProfileStringA

user32

DefWindowProcA
PostQuitMessage
SendMessageA
DestroyWindow
DispatchMessageA
TranslateMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
PeekMessageA
MessageBoxA

shell32

ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE