db90c7107d4be95556bd1478ca4675b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db90c7107d4be95556bd1478ca4675b6_JaffaCakes118
Size

48KB
MD5

db90c7107d4be95556bd1478ca4675b6
SHA1

328da130d34afc19be953ee339eb68836e597850
SHA256

075e96b9da55d6ce7f835de72a9966525a29de0755aa3f3fa07f2d7c6a7df0fa
SHA512

8dbdc9b4c8a1cfaaf3ce381854ed791947df0f1536080a74877fccd1c9b16cc4104223518255261ef3aee18120ab34aba25dcdb41d71753c2babfb4682249060
SSDEEP

768:pEcOXEEJmpjbT8vjdehdnxaAYKBP2/qq6AjeICeWT6/kBtlY8WVk9kYuPS:kDJmjhdnxaAXdE36eewWT6/kt59kYuPS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db90c7107d4be95556bd1478ca4675b6_JaffaCakes118

Files

db90c7107d4be95556bd1478ca4675b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ