beb49fa0d79fbad1da3efa50593ecae4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

beb49fa0d79fbad1da3efa50593ecae4_JaffaCakes118
Size

128KB
MD5

beb49fa0d79fbad1da3efa50593ecae4
SHA1

1a0c0ecff034529c781f1a74e3aa3fc63d0e251e
SHA256

df29b5d88343bb5be80ec0eedbf2924ec1d5b00917b5952e87a34553bdc7ab26
SHA512

5008c8abc03bfdded814eee562c5db401546abd190ddcffe8c1fd4241e475dcb04a33eed327c2263d6da76364fc85a7a24e66f68d2d8633a96c434d5dc388fc4
SSDEEP

1536:cZ53Nh1hlr6oFrkiXDcDcDGW4Jn/nYXOZgTI74W9Qx2lZmo2E4lMNli+Ku7jEArx:cZt1hcoxXoQiW4J/njggQSmoulMNBbvB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
beb49fa0d79fbad1da3efa50593ecae4_JaffaCakes118

Files

beb49fa0d79fbad1da3efa50593ecae4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b15de66230ef79b9b3facda6874287a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
FindResourceA
SizeofResource
LoadResource
CreateFileA
LockResource
WriteFile
CloseHandle
GetProcessHeap
ExitProcess
HeapAlloc
HeapFree
IsBadReadPtr
GetEnvironmentVariableA
GetModuleFileNameA
WaitForSingleObject
CreateProcessA
GetStartupInfoA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE