1016b5ac9b5151790e4dc4c7d46dbe60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1016b5ac9b5151790e4dc4c7d46dbe60_JaffaCakes118
Size

6KB
MD5

1016b5ac9b5151790e4dc4c7d46dbe60
SHA1

b8a4627ee373e160e6b3378b9516b9a8f0376633
SHA256

f28cc8f3a51440482c491e0293623e4cdc496affaf76cc5aa67d6cceba10fb22
SHA512

0cedc5a47a8f040986d275509ebf6514403e153b5964f6b77a4de74039f74199fe91f18944b1e002e8bcd7b1b2c3f03c9f11bfdb8b4a6e48cd5253f09217b812
SSDEEP

96:f75cDWClyOPBVFVFIihHohOvaP8gn/WoWCE/ImCWV9:yDxwOPBJCi1okvQnhWf/vCW/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1016b5ac9b5151790e4dc4c7d46dbe60_JaffaCakes118

Files

1016b5ac9b5151790e4dc4c7d46dbe60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85fdf73987b945695b467a3ea4a5f1dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
CreateThread
WinExec
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeLibrary
lstrcatA
GetWindowsDirectoryA
CloseHandle
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
Sleep
DeleteFileA
GetTickCount
GetTempPathA
TerminateProcess
OpenProcess

user32

PostThreadMessageA
GetMessageA
TranslateMessage
MessageBoxA
wsprintfA
DispatchMessageA

msvcrt

fgets
fclose
strstr
fopen

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ