393c09f6124510acf29b3f318d16762c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

393c09f6124510acf29b3f318d16762c_JaffaCakes118
Size

42KB
MD5

393c09f6124510acf29b3f318d16762c
SHA1

0f13e9edfdbf00bb206030d333d96c862ddd589e
SHA256

f4d7486cfb4d87bf54dce89e5920d38281740fbfa9d620da8e2a9fe0eaf6e7fd
SHA512

b974c50409963f2eee40d092232128d7b8c8fb69e9b5dc48cbbf50eff0ed6a40f48a2c9e947630de6f1115a4089ac8619e9de813e18c76b38d83563fe426391b
SSDEEP

768:EKJGQOo/o9ZsAURX6fxKKQTbXzEVnoMNJ0hdrXyQ4lDMN8bZ1va6TefOM1cMs:EKFjo9M1eEr4VnoMN67qlDe8bZ1CsiOM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
393c09f6124510acf29b3f318d16762c_JaffaCakes118

Files

393c09f6124510acf29b3f318d16762c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a53b032110d1523f8fab8f08eb619bfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
LockResource
GetModuleHandleA
CreateThread
FindResourceA
ExitThread
ExitProcess
Sleep

user32

SwapMouseButton
MessageBoxA
wsprintfA

advapi32

RegDeleteKeyA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA

winmm

PlaySoundA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE