ed48ff822f0d42ff890ef0dfb3e7347e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed48ff822f0d42ff890ef0dfb3e7347e_JaffaCakes118
Size

111KB
MD5

ed48ff822f0d42ff890ef0dfb3e7347e
SHA1

bc41ba0114ccc0f5a4ec6c7cf83e7e432651a1b7
SHA256

329e6659dec1b19e94e2352f9fa7a51590fe89459378cdc233f6d08cc6acb29e
SHA512

226b5500a06afc41c74142376bba955e3421782a100bb8f2c727596a29f54b9937e24e951b4da7a0567631d9e47b937697ed88c809fdbc5ec8149d1a1304f5fc
SSDEEP

3072:o80IwJxDieMR2F6hDmxL05vDpAdmWkrPEtfBWbq/u:oVYR28hmd05lAdmdKQbq/u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed48ff822f0d42ff890ef0dfb3e7347e_JaffaCakes118

Files

ed48ff822f0d42ff890ef0dfb3e7347e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c9749513208288305099900ce01b1603

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
ExitProcess
lstrcatA
lstrcpyA
RemoveDirectoryA
DeleteFileA
FreeLibrary
CloseHandle
GetProcAddress
LoadLibraryA
WriteFile
CreateFileA
lstrcmpA
lstrlenA
GetFileAttributesA
GetTempPathA
GetModuleHandleA
GetFileSize
GetModuleFileNameA
VirtualAlloc
VirtualFree

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gentee
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ