b557f0af03b1e60938923ad40a26d8e0_JaffaCakes118 | Triage

Sharing

General

Target

b557f0af03b1e60938923ad40a26d8e0_JaffaCakes118
Size

237KB
MD5

b557f0af03b1e60938923ad40a26d8e0
SHA1

80f19548f4ce34ee2b62fadf360f244d998ac568
SHA256

94a63d93b9266b23a006a80b05b65eee885aecba53d2eda48f920580209dbfa0
SHA512

c7009bdfd7ad6c5b94ad61fa0e0ce1f8bfde9eb23c3487fee750b31a7f409e020dcb819fa3c6eb59dcb41aa38d0f6eb30d1381687ceee929cc34ca13450fe438
SSDEEP

3072:QNBg56EuMelmameAJBZQJfQWzQQcvPoVrRwDHn:QNhMUmVmJfFQQcnoVy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b557f0af03b1e60938923ad40a26d8e0_JaffaCakes118

Files

b557f0af03b1e60938923ad40a26d8e0_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

d7e47c7fb949a181ac08b08e8ca5d50e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
WriteFile
CreateFileA
LockResource
SizeofResource
LoadResource
FindResourceA
Sleep
GetLastError
DeleteFileA
ExitProcess
RemoveDirectoryA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
lstrcatA
lstrcpyA
SetCurrentDirectoryA
CreateDirectoryA
GetTickCount
GetTempPathA
EnumResourceNamesA
lstrcmpiA
GetCommandLineA

user32

wsprintfA

Sections

.text
Size: 1024B - Virtual size: 769B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 846B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 234KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ