b000552bb724c5eb4a9db0dd78a9272c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b000552bb724c5eb4a9db0dd78a9272c_JaffaCakes118
Size

8KB
MD5

b000552bb724c5eb4a9db0dd78a9272c
SHA1

aaf85b25d362438999501dfa47c2c431aa3a4fed
SHA256

14854ed6587f3a564d25165f0af74a0dbafd5638bb221c039bf0ec0efc063d7f
SHA512

8a870864a40836a72e9ecb7e10c64849b4dac793de3e4608a0de639fe5c3fb30427662a904b25f38d1d6fbab3439298f9dd6b96396c7f2a305a9f664fe82ba22
SSDEEP

192:s0H0G6wUqG9wqYaHQGrju00dZo9UWbZ724vJawD8/qcNZD8/qcZyFKPh1K:sqxjUqG9wqYaHQGrju00b4HlqgJawD8f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b000552bb724c5eb4a9db0dd78a9272c_JaffaCakes118

Files

b000552bb724c5eb4a9db0dd78a9272c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ