e751959db411ec9412e1e03774edc236_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e751959db411ec9412e1e03774edc236_JaffaCakes118
Size

156KB
MD5

e751959db411ec9412e1e03774edc236
SHA1

5927a6b58ea71999873167d6d164454becfa0fc1
SHA256

9ee1e63a1ce4e9493c33bc027f097c8e38dffa0d40e77e3c5c2f56e718587594
SHA512

2ce479859e0b4536e953f83e8e0a6d792e78a1533e5713e1a87c04e12075e3cf8ebe1780688bd4aab0e50096da8c5c38a4ca6fe808714c638e0f41e2ae6a257f
SSDEEP

3072:A/fe7MOSutrpS+hKK8W44RLunxRcZNvoJZMdNKI07zSQQ2LD5wh8G18O:A/cDS+hKK8W442xyZB2kNKISzSQQYVC1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e751959db411ec9412e1e03774edc236_JaffaCakes118

Files

e751959db411ec9412e1e03774edc236_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68f579ed3797e30b2d2c0d5e9960c620

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
Sleep
LoadLibraryA
MoveFileExA
GetModuleFileNameA
GetExitCodeThread
WaitForSingleObject
CreateThread
GetProcAddress

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE