da264c7cd5928e00e29716f90274d11e_JaffaCakes118 | Triage

Sharing

General

Target

da264c7cd5928e00e29716f90274d11e_JaffaCakes118
Size

6KB
MD5

da264c7cd5928e00e29716f90274d11e
SHA1

b09c573ce3b275ea2857c3219374a76dd5de668f
SHA256

4792ff521e68a67409c5a42e1ae8ae7ec3d942fbbcc22d7b827a7a26374514ad
SHA512

d70bdb7b31bc45bb541015f35290642dc5073a23e273ed42ddf69146d7004c9ef1ffbdbbf4c34357c3ad8f495ec4f2175cbecd8ed30ffb058df4cf7f7a6d5815
SSDEEP

96:72F8B/kBg/zfNojCMc19K78H/Zvv+WoetvWCE/5rCWV9:72F8BcgLNuBIJv+WogvWf/FCW/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da264c7cd5928e00e29716f90274d11e_JaffaCakes118

Files

da264c7cd5928e00e29716f90274d11e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0ed14e1863ddba38667b49c0ad5dd81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
WinExec
GetModuleFileNameA
ExitProcess
GetLastError
CreateMutexA
GetProcAddress
LoadLibraryA
lstrcatA
GetWindowsDirectoryA
Sleep
DeleteFileA
GetTickCount
GetTempPathA
CloseHandle
Process32Next
TerminateProcess
OpenProcess
lstrcmpiA
Process32First
CreateToolhelp32Snapshot

user32

wsprintfA
GetMessageA
TranslateMessage
DispatchMessageA

msvcrt

strstr
fopen
fgets
fclose

netapi32

Netbios

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ