d16de8cfeb5ec9081d10d54262c4f4bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d16de8cfeb5ec9081d10d54262c4f4bd_JaffaCakes118
Size

5KB
MD5

d16de8cfeb5ec9081d10d54262c4f4bd
SHA1

9ce7195ee21138a97431ab0f6db898e24112a0f4
SHA256

e31063e776b3caa2aeedb1d3f45da085ccbf0ffd30fc9d996d0568525cb7a61a
SHA512

fcf4c0479748eda61cab49f336d9299e411feca6a58bfaae7b5a75f27ef0bcd4d76208d37794ae5609e9476c4a59254f9b81f3d1484d9f4037f9fba501bb49b0
SSDEEP

48:yrYIzNuBDol3nESGRVANw49iU4+ffgGgfYuYx0AmCpRgeYsUrcor9dpQ3T7p:lIpcclXeiNJIiaox0MOeYsUMT7p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d16de8cfeb5ec9081d10d54262c4f4bd_JaffaCakes118

Files

d16de8cfeb5ec9081d10d54262c4f4bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2cdc3e217d63958d44c2d8914348738b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExA
GetTempFileNameA
DeleteFileA
WriteFile
CreateProcessA
GetLastError
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
ExpandEnvironmentStringsA
CreateDirectoryA
CloseHandle

advapi32

RegDeleteKeyA

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 757B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE