ef7288f80c919e2540545d40c5408098_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef7288f80c919e2540545d40c5408098_JaffaCakes118
Size

84KB
MD5

ef7288f80c919e2540545d40c5408098
SHA1

6e15ac1a90f0b4d22dbb91edde5f0ee7d787aa81
SHA256

6cbaf9fcda4d94c3c68515723e00a7d8f574e7f61b7bddb7ffb77ea674579981
SHA512

566b8ffb4ed11af90a8fa7ed1115564de97f7c77dcc6f92569fe788fa094e160bc6e3e1420f137f79992b241d94c89c961c8f1858b52b0b66773f9e56825c97d
SSDEEP

1536:WZyL8OR0Wd1YS9DanycPgfT72fgXYE16sOeq53/KCY3L3RiAfLiZaK+Q:WZodbY8DMdPgfM3/VefLib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef7288f80c919e2540545d40c5408098_JaffaCakes118

Files

ef7288f80c919e2540545d40c5408098_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15cf8a086ee3fdad993a4286d92c733d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
PostMessageA
FindWindowExA
FindWindowA

kernel32

lstrcatA
WriteFile
CloseHandle
CreateFileA
ExitProcess
GetLastError
GetTempPathA
Sleep

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ