457796434dc99d0021e1b621d3c6162b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

457796434dc99d0021e1b621d3c6162b_JaffaCakes118
Size

240KB
MD5

457796434dc99d0021e1b621d3c6162b
SHA1

275f44514caef66f65a1f055584f928c4d6e95d6
SHA256

01d16efe81e5d76af76975a20ca8fada553e42f0c620bcf9f1c019e4196ff3cc
SHA512

bb01e3613e229cf706293c7db76ee539295af9d2ae5a38fdaadf5b68da20e7b38a3d11b49b4d6c80a09b824b649c61b86c294627b792cd184adf97e16f2cc358
SSDEEP

6144:aMXestShIKWvXhkQvJduictqkJU6i4wl5+TQ6Lfba2MPGS1:n9MIKihnvjRkJU6inITQgfbaI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
457796434dc99d0021e1b621d3c6162b_JaffaCakes118

Files

457796434dc99d0021e1b621d3c6162b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ebe3d219ffbe0140dce0ef512f66654

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

PeekMessageA
SendMessageA
EnableWindow
GetDesktopWindow
EnumDesktopWindows
PostMessageA
FindWindowW

cfgmgr32

CMP_Init_Detection

shlwapi

PathAddBackslashW
PathFileExistsW
PathRemoveFileSpecA
PathFileExistsA
PathRemoveFileSpecW
PathIsDirectoryW

kernel32

GetProcessHeap
GetModuleHandleA
GetFileSize
ResetEvent
ExitProcess
GetTempPathW
GetCommandLineA
GetPriorityClass
SetEvent
SetCurrentDirectoryA

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.strings
Size: 5KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ