b8b9ef6139555eb9888145a4a2a59867_JaffaCakes118 | Triage

Sharing

General

Target

b8b9ef6139555eb9888145a4a2a59867_JaffaCakes118
Size

133KB
MD5

b8b9ef6139555eb9888145a4a2a59867
SHA1

8ab3e0e09022a3dcaf49c162331adf8832d930e5
SHA256

b458321016c820bd01299c2f73b27ce289a8b85073db8c87b1b22cd8dc8fc5a1
SHA512

41e6a2a0d660cf5efdd2e6c33b7518176e6df3ac7b0f841c387f33321a06e74878d20dd686461737950252d95320ae9d04b3d63626c916491e53117d285364c5
SSDEEP

768:rodQ6LLWNTf8+TiXCvLKVs2cg/RDHmDveqf0j9B1mRACuNtuuuuuNuuuOuNtuuu3:roi6GNT0Rs+Tjm2qAHmRArDe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8b9ef6139555eb9888145a4a2a59867_JaffaCakes118

Files

b8b9ef6139555eb9888145a4a2a59867_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c30c7a802ccc880fcd9bf5f42886317

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
PostMessageA
MessageBoxA
GetMenu
FindWindowExA
FindWindowA
wsprintfA

kernel32

lstrlenA
lstrcpyA
CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetShortPathNameA
GetWindowsDirectoryA
SetFileTime
Sleep
WriteFile
lstrcatA

shell32

ShellExecuteA

advapi32

RegCreateKeyA
RegSetValueExA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ