b9c0d9b9de7af79431f3cbadf0569795_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9c0d9b9de7af79431f3cbadf0569795_JaffaCakes118
Size

24KB
MD5

b9c0d9b9de7af79431f3cbadf0569795
SHA1

ed96199a0784c0f11f9c089f924f7b5c9a9ff4a1
SHA256

ed7801d5e94235dd136ebec589f133f354fbbf660365054a0093f119c3b59fad
SHA512

756b920df04709bddac1165cbf019b1da3423de98c3887ba18491b159a511c5c554d2e2ee12ea9053a881743f0b889a0a34b346f45c7b6958d52b5da630d3f95
SSDEEP

384:fO1iUzhWcHkG0W/8AoWQC3heKByw2fcuzd3RI4CzT/jiBrUNWLhDEWb:3OhWcqAa8he4yncWFAjmRt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9c0d9b9de7af79431f3cbadf0569795_JaffaCakes118

Files

b9c0d9b9de7af79431f3cbadf0569795_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e0cd9bb60c14129fcfcc10e2949423c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
WinExec
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA

user32

MessageBeep
GetMessageA
wsprintfA
MessageBoxA
TranslateMessage
DispatchMessageA

msvcrt

_except_handler3
_stricmp
atoi
strrchr
_itoa

netapi32

Netbios

Sections

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ