fe88f94a5efa3148f2f8930e760a52d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe88f94a5efa3148f2f8930e760a52d1_JaffaCakes118
Size

10KB
MD5

fe88f94a5efa3148f2f8930e760a52d1
SHA1

64b2786b85c5aec35479c6fe02e75b4df0f40831
SHA256

a82a0d8fc5e9de83b7e75fad2bb9dec76d63b86bbf4905945ad01a52561bd5fa
SHA512

e4fbbd0e7fdba3948a891e2fdb56685cf036e65522e400100c7483d1fade89f011eedf4f35606c28e9d9fde2e79ec8433f34ee0b87e7abe8dc92ba261621e5cd
SSDEEP

192:xcOHePmypV+bH+VsBV7yOZHA7k0OT0YLW/8AoWE:xcO6iBcOmk04W/8AoW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe88f94a5efa3148f2f8930e760a52d1_JaffaCakes118

Files

fe88f94a5efa3148f2f8930e760a52d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e0cd9bb60c14129fcfcc10e2949423c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
WinExec
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA

user32

MessageBeep
GetMessageA
wsprintfA
MessageBoxA
TranslateMessage
DispatchMessageA

msvcrt

_except_handler3
_stricmp
atoi
strrchr
_itoa

netapi32

Netbios

Sections

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ