d3bb67993b2dfffebd818d356fec7637_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3bb67993b2dfffebd818d356fec7637_JaffaCakes118
Size

7KB
MD5

d3bb67993b2dfffebd818d356fec7637
SHA1

6458ac1743972a04d8dae5e1201201bf325efedb
SHA256

829f9a943f00d8b5d6471c950072fa6c1b1da9ef6294b0061b9083c879871d68
SHA512

1172b4dbb204339daaf53c7be36d17b90be81da68e52f5b8b52b26d7167c8f86cb345fe9dc83a78d883063dd051a8a011d55bbaaf10a345ff8c1d56e94161dc2
SSDEEP

192:XcXMWwSDBJjS01x8449H5oB9/Rka1Qv8tI4U:WldrSyxw7oaijI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3bb67993b2dfffebd818d356fec7637_JaffaCakes118

Files

d3bb67993b2dfffebd818d356fec7637_JaffaCakes118
.exe windows:5 windows x86 arch:x86

82fb7e0259aaf81f3fbdaf4dbc8ad559

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sprintf
memset
memcpy

kernel32

CreateFileW
CreateThread
ExitProcess
CreateFileA
GetFileSize
SetFilePointer
MoveFileExA
HeapAlloc
HeapFree
WaitForSingleObject
GetProcessHeap
WriteFile
Sleep
CopyFileW
HeapCreate
ReadFile
DeleteFileA
GetTempPathW
GetProcAddress
LoadLibraryA
DeviceIoControl
GetModuleHandleA
CloseHandle

user32

GetShellWindow
SetForegroundWindow

shell32

ShellExecuteExW

Exports

Exports

Start

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ