bead4cffd39914c9912853bdca39b8a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bead4cffd39914c9912853bdca39b8a0_JaffaCakes118
Size

5KB
MD5

bead4cffd39914c9912853bdca39b8a0
SHA1

ed04be1451553c8f1e1792832a6c6d7e141a2d87
SHA256

474426fae6f7f2603fd3e9cc556062a318e33883eddbd2b23c5085028a8f51d0
SHA512

4aa8433fc54c9b8a71cf00c89042f2f391adb3793e708f2b25731f44bfcd65f200b37131059916a6c5d8c7810a9a42754e680742fca26c37699d8dc29b50f923
SSDEEP

96:OEslQJrgitRy5aWCjIM3BTlFnfvbI4q6:jgQhXjIGBTTn3bI4q6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bead4cffd39914c9912853bdca39b8a0_JaffaCakes118

Files

bead4cffd39914c9912853bdca39b8a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a1b6439ae84c7377fc2af06e02e432ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrcpyA
WideCharToMultiByte
GetModuleFileNameW
CreateEventA
CompareStringA
CreateToolhelp32Snapshot
Process32First
CreateThread
WaitForSingleObject
CloseHandle
ResetEvent
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
GetModuleHandleA
SetEvent
ExitThread
GetProcAddress

user32

EndPaint
BeginPaint
ShowWindow
DispatchMessageA
PeekMessageA
CreateWindowExA
TranslateMessage
MsgWaitForMultipleObjects
DestroyWindow

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE