b183b32f3ac4b3410295afb4a2f3467c_JaffaCakes118 | Triage

Sharing

General

Target

b183b32f3ac4b3410295afb4a2f3467c_JaffaCakes118
Size

144KB
MD5

b183b32f3ac4b3410295afb4a2f3467c
SHA1

9860f5aa277ac48f5f483900514875aedc8305ef
SHA256

a4470b9d39db43538069d7d1793f037e050c1b2cf00a24f5c2f94519c3048888
SHA512

181e534a366df5651f2da1e07a95329f5650fbcec9e5e41519d05b7acf1ee73a658b59e171fad36471daf46e8397a37df57851693ed617d49bd0b4f637af7430
SSDEEP

3072:iBMvzevo6jEHoIrnp/zzrTJ0iaeeDrQ1C4aaStc+1d:kMiw6HSBHrqYCvW+1d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b183b32f3ac4b3410295afb4a2f3467c_JaffaCakes118

Files

b183b32f3ac4b3410295afb4a2f3467c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

263f2c74198635066e799ddd460d8fcf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
ExitProcess
lstrcatA
lstrcpyA
RemoveDirectoryA
DeleteFileA
FreeLibrary
CloseHandle
GetProcAddress
LoadLibraryA
WriteFile
CreateFileA
CreateDirectoryA
lstrcmpA
GetFileAttributesA
GetTempPathA
GetModuleHandleA
GetFileSize
GetLastError
CreateMutexA
GetModuleFileNameA
VirtualAlloc
VirtualFree

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gentee
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ