bab7d0ef1da10995368e801514b197ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bab7d0ef1da10995368e801514b197ae_JaffaCakes118
Size

16KB
MD5

bab7d0ef1da10995368e801514b197ae
SHA1

a18003a451167236db50d0f97ef8c98b34d2ee60
SHA256

46a31c2f5d3b16fe1c299b705dbc6ee726ca49dd9b6a96506cb82e090d11d723
SHA512

c919837f87aeb18779092e23a0e3d6a9d216718bc31c5a9ea9e56f8e76244184818732858437830d87c7173427ff753c0cc3879bb165f81bd8a41327ff1e5772
SSDEEP

192:hEe0kG6wUd9cpCyV7SM4o4feeEEZpaH8z:fkjUzcT7TweUpG8z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bab7d0ef1da10995368e801514b197ae_JaffaCakes118

Files

bab7d0ef1da10995368e801514b197ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a89df733bb5264dcce0501a85aba08b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

GetForegroundWindow
MessageBoxA
LoadStringA
wsprintfA

shlwapi

StrToIntA

Sections

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ