f365e22a3da9879152ab0b054d0547ae_JaffaCakes118 | Triage

Sharing

General

Target

f365e22a3da9879152ab0b054d0547ae_JaffaCakes118
Size

64KB
MD5

f365e22a3da9879152ab0b054d0547ae
SHA1

b2b3d534062ad5ec9f0fbd04dca07df3a2ab5700
SHA256

3a712b24c19cc73f3282050efc27fcc1937e7d990af86598eca6487ba47aee5c
SHA512

44fcd4d4495ddaf88254bab7d2eead43adb1a13882133eeab6a99197816a07019f4824a8c11eb5632b3a97173e769a557d484d33cc98cb549f87ed24b20df6f4
SSDEEP

1536:XJknqB6vMdepJquA7Ajft4KotJYYYYOjz:XiU6vuDuAIdotJYYYYOjz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f365e22a3da9879152ab0b054d0547ae_JaffaCakes118

Files

f365e22a3da9879152ab0b054d0547ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

219ff6274b700581af1c16e303a1eac6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
FindClose
FindFirstFileA
GetSystemDirectoryA
SetFileTime
GetFileTime
WinExec
DeleteFileA
GetModuleFileNameA
GetWindowsDirectoryA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ