0682784b93a2c3c8b3cf624d54c8dbce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0682784b93a2c3c8b3cf624d54c8dbce_JaffaCakes118
Size

8KB
MD5

0682784b93a2c3c8b3cf624d54c8dbce
SHA1

1a3a5009c100dfbfc3bb7e95a2a0b6c242072f1d
SHA256

19a3e08d49ad798afee2155b6097f911d4dd77eb6a00a6a477f13bc406ef48da
SHA512

a401a121fcc82a1c03ccf02094142dde546402b2ad6f30f8a52a663d23cb4a153b64d6a34f0712f458333c92b1aa7473c22f3f5e3c6ea6d56ff1e341bcc3c547
SSDEEP

96:F30H0GV2/wUqGhjzyV7nS62sQC4o4fOYyTSzm9izZp43Z9NjU:x0H0G6wUqG9zyV7SM4o4feeEEZpaHjU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0682784b93a2c3c8b3cf624d54c8dbce_JaffaCakes118

Files

0682784b93a2c3c8b3cf624d54c8dbce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ