df095d63869d017674f86cc26976400b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df095d63869d017674f86cc26976400b_JaffaCakes118
Size

53KB
MD5

df095d63869d017674f86cc26976400b
SHA1

081785d18916c5e0436727744ad73b9e1ef12ba9
SHA256

68e12124585badeda4a83bbf5c63e3299ced69a10b51d40ff079e24de6998375
SHA512

d2231b085fdacf328c4cb84dbc6a467151cfd13d04cb280896bcd88b653e41db203ec7950ead180b4dfe269535767020d375458b6c17acc13a35038b5e85e4c7
SSDEEP

768:sX8GY5DmxS92O4RLWXK2M8O/oUaAiOnJeiQIk5omVBP6dM1YfwrswWsOPlprZ:elzGiWXYXH81vVBsN+LWsOPTZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df095d63869d017674f86cc26976400b_JaffaCakes118

Files

df095d63869d017674f86cc26976400b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

514c4c1141c3d9d3dcedb42bddd01132

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess

user32

OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu

advapi32

RegOpenKeyExA

Sections

.text
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 28KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ