ac264b21d8d84b66bcec0fcf9ddea727_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac264b21d8d84b66bcec0fcf9ddea727_JaffaCakes118
Size

18KB
MD5

ac264b21d8d84b66bcec0fcf9ddea727
SHA1

b3c497fe3c31149d49631d3e42076797ea3d15ca
SHA256

02fa0599bb19730fc4bdb8d7c95ca3449b015954117b1f242ded612a053216d0
SHA512

5adc182ce46e5440c6b7f55b62103944c4d98104d5afc63bcfbfd66320d2c910ea5d0636f80b51ea80f969fd6e57573f2b44c224a7f768786bb94b3c9f0b21be
SSDEEP

384:7Yc77/5fDKtjJfEVJyb8yU+h3yryOAgKcul0szto:8cv/5+tMyvJmul0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac264b21d8d84b66bcec0fcf9ddea727_JaffaCakes118

Files

ac264b21d8d84b66bcec0fcf9ddea727_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56556a00363d4757f2ed43221a1b4638

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetFileAttributesA
lstrcatA
GetProcAddress
LoadLibraryA
SetEvent
GetModuleHandleA
GetCurrentThreadId
CloseHandle
lstrcpyA
lstrlenA
SetFilePointer
GetModuleFileNameA
RtlUnwind
ExitProcess
CreateThread
WaitForSingleObject
GetVersionExA
WriteFile
ExitThread
GetTempPathA
CreateFileA

user32

wsprintfA
DestroyWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
ShowWindow
CreateWindowExA
SetThreadDesktop
CreateDesktopA
CharToOemA
BeginPaint
IsWindow
CloseWindow

Sections

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ