bee243164ed857fc1d079aeea00fca22_JaffaCakes118 | Triage

Sharing

General

Target

bee243164ed857fc1d079aeea00fca22_JaffaCakes118
Size

30KB
MD5

bee243164ed857fc1d079aeea00fca22
SHA1

697f896d66c6a61b5ac8b455c5fef16f2557576e
SHA256

07cc60caf0869006f0f0c29e8139b8d7244e21bae1bd3744281c5840b08cbc2a
SHA512

d87a1ecdf8648f2acc03c54a313b24d371344e9a175d081b44b9c4aeafbdba932172ad90b97f499528841cffc328aaaf518703dfed644bfef95611b6322d1e45
SSDEEP

768:ILlYRN/tTLvu7P9keZrBZLLESBd4rvnV9hr:XN/t+PKmbeznVD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bee243164ed857fc1d079aeea00fca22_JaffaCakes118

Files

bee243164ed857fc1d079aeea00fca22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

773ce77be22156d5ad88b8e3d88e4135

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
VirtualQuery
RtlUnwind
ExitProcess
CreateFileA
lstrlenA
GetTickCount
WriteFile
lstrcatA
GetTempFileNameA
CloseHandle
GetTempPathA
DeleteFileA
lstrcpyA

user32

DispatchMessageA
ShowWindow
DefWindowProcA
GetDlgItem
CreateWindowExA
TranslateMessage
BeginPaint
SendMessageA
FindWindowExA
KillTimer
PostQuitMessage
RegisterClassExA
SetActiveWindow
SetTimer
GetMessageA
DestroyWindow
EndPaint
LoadCursorA
UpdateWindow

shell32

ShellExecuteA

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ