0952e5b54271158aca53347f9221b85d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0952e5b54271158aca53347f9221b85d_JaffaCakes118
Size

25KB
MD5

0952e5b54271158aca53347f9221b85d
SHA1

510d7f2291a2e95159b27afce8ae31c2d500b8b7
SHA256

719a6db649d2a69440ebbb70fcaef3a254dd4c3273dcca3856739a2465d28638
SHA512

ec4cf01fc0882064b69bc430a88f384fab55d755681252b2eeaa06c9cae9f09fa1df6e11f5ec5ffd55479539cd4921341fa46934369426aeefedf858ca3d9e56
SSDEEP

768:Bx+JWRV+UKK868R8x8C888Q8E8m8E8M7uAuT5dvZ1:PqUKKzq2fhbp1pD7uAuFBZ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0952e5b54271158aca53347f9221b85d_JaffaCakes118

Files

0952e5b54271158aca53347f9221b85d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

694849e676f4fde6927f25b093fc4488

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strncpy
memcpy
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetProcessHeap
CloseHandle
InitializeCriticalSection
GetCommandLineA
WriteFile
HeapFree
CreateFileA
HeapAlloc
GetFileSize
HeapReAlloc

user32

CallWindowProcA

Sections

.code
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ