f26490ed3a82baec51dff6f3ed58edb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f26490ed3a82baec51dff6f3ed58edb8_JaffaCakes118
Size

76KB
MD5

f26490ed3a82baec51dff6f3ed58edb8
SHA1

811c6cdb1faa1ff0ab3adcc518a60abb345892dc
SHA256

65f4a2a8daac8903e923e3532b65309a544d083e257d3a9320a7d681c68d7813
SHA512

0c2356418d2f667b232e0541385de9140d76b03ea5a1273c6bca5fb69531c55b45aa9aa0685f60474d4301b51f0df622ce185ece9b8d27a30c0a14367876056d
SSDEEP

768:hwik5tgxsKeWke/sKR4yYKY87cY/4MVEMImrrRBpxfCaqDK9wX1KPjfMwpaPktWr:Q4CKaOz+NrYfrlBFqDK9YYjPkkiRso

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f26490ed3a82baec51dff6f3ed58edb8_JaffaCakes118

Files

f26490ed3a82baec51dff6f3ed58edb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f93aa7113f95b54f638c82d3231f866c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCommandLineA
ExitProcess
CreateProcessA
lstrcpyA
lstrlenA
SetFileTime
GetFileTime
CreateFileA
GetWindowsDirectoryA
SetFileAttributesA
CopyFileA
DeleteFileA
CreateDirectoryA
lstrcatA
lstrcpynA
lstrcmpiA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetLastError
CreateMutexA
WriteProcessMemory
ExpandEnvironmentStringsA
GetCurrentProcess
GetProcAddress
OpenProcess
GetCurrentProcessId
lstrcmpA
ReadFile
GetFileSize
SetLastError
VirtualFree
ResumeThread
GetPriorityClass
VirtualAlloc
CreateRemoteThread

shell32

ShellExecuteA

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ