b46a9c2143a8e3b01e195e0dd27c98b6_JaffaCakes118 | Triage

Sharing

General

Target

b46a9c2143a8e3b01e195e0dd27c98b6_JaffaCakes118
Size

38KB
MD5

b46a9c2143a8e3b01e195e0dd27c98b6
SHA1

f00dbdc2ae31182d51cc12e119d2b8ee5781d593
SHA256

7af0c83f4eb715f6e7645011dfc6ba21d734b1d953f8f10f6fb8c25d850e5390
SHA512

ad744ded3f5477ed5243c383374ed32c2e5542da9c3b5ad4a1eda2bfe84d25adc0809839c73b689eb0e2d5a4c9a372d65b46c3fba36e6b528895136dc6f8d267
SSDEEP

768:fJ2t/VYIpvGFEwAv23meqxKAA7LH1pyOuVTwfL+xB91M96ol6r:x2t/VUSdexKXAlg2L+xB91M9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b46a9c2143a8e3b01e195e0dd27c98b6_JaffaCakes118

Files

b46a9c2143a8e3b01e195e0dd27c98b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04732912e723f2daf51104b175cba2e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperBuffA
MessageBoxA

kernel32

WinExec
lstrcmpA
lstrlenW
GetModuleHandleA
lstrlenA
CreateThread
ExitThread
CreateFileA
GetVersionExA
VirtualProtect
lstrcpyA
ReadFile
CreateFileMappingA
VirtualAlloc
GetFileTime
SetThreadPriority
GetLastError
Sleep
GetTickCount
DeleteFileA
lstrcmpiA
GetLocaleInfoA
TerminateThread
VirtualFree
SetEndOfFile
SetFilePointer
CloseHandle
WideCharToMultiByte
MapViewOfFile
GetProcAddress
WriteFile
ExitProcess
LoadLibraryA
lstrcatA
GetFileSize

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 958B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_INIT_
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE