d5fb4e75cebc10f92b36ffc4613550e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5fb4e75cebc10f92b36ffc4613550e1_JaffaCakes118
Size

6KB
MD5

d5fb4e75cebc10f92b36ffc4613550e1
SHA1

11ecde188b0aea6f5ce29acfe11ddc6d7df26537
SHA256

6dd2461e454a25053926cbfc8c99aabecaeb4e8e937ef13e82c336d9e2ef9f33
SHA512

c7b5def7517f9f52588f3bbb3c9dd5b85bf0fe79f8a57083dc9d86e9f1253052d42f36c3400378e099446f40821d8c5d570765eb6440cffda6cb98fa04a964d8
SSDEEP

96:0kJ6L/dz+8fCYfdlbfizB09+IVeeYaDg5:Tw7Z+86ia+9+IVfa5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5fb4e75cebc10f92b36ffc4613550e1_JaffaCakes118

Files

d5fb4e75cebc10f92b36ffc4613550e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15b84b8a4a8a2e8dcfb461d9c16f357f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

MessageBoxA
RegisterWindowMessageA
SendMessageA

kernel32

WriteFile
WaitForSingleObject
Sleep
CloseHandle
CreateDirectoryA
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempFileNameA
GetTempPathA
GetTickCount
LoadLibraryA
LoadResource
LocalAlloc
LockResource
SizeofResource

lz32

LZOpenFileA
LZCopy
LZClose

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 527B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE