156bcdafae204a2a3e9f5a45d19cde78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

156bcdafae204a2a3e9f5a45d19cde78_JaffaCakes118
Size

8KB
MD5

156bcdafae204a2a3e9f5a45d19cde78
SHA1

4e198b13f766c05b789fb1de2360aec7b3416c26
SHA256

124ab268f85889f19bf7837ce08e5787de79554019585d08a0dc1eea23623689
SHA512

e7e572a059933f373ba76a47163a8925a792fd07c35aa6d430f326aa29147ae0c5169e9a0c7085524cdbb952d0e345272e71f0c4c871bcf2167082379f344eab
SSDEEP

192:oeDweOzgqAPm/63FbtjwrJd+UuK3oTW412Wf/5CW/:DDrvRPBU3oTW412Wf/5CW/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
156bcdafae204a2a3e9f5a45d19cde78_JaffaCakes118

Files

156bcdafae204a2a3e9f5a45d19cde78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

975ad020cec5104b8b5c56918e680514

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateThread
GetTickCount
ExitProcess
GetLastError
CreateMutexA
lstrcmpiA
GetModuleFileNameA
SetFileAttributesA
lstrcatA
GetSystemDirectoryA
FreeLibrary
GetCurrentThreadId
GetProcAddress
LoadLibraryA
GetCurrentProcessId
DeleteFileA
lstrcpyA
CreateToolhelp32Snapshot

user32

GetMessageA
MessageBoxA
TranslateMessage
DispatchMessageA
wsprintfA
PostMessageA

msvcrt

_itoa
fopen
fgets

Sections

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ