f55272bedfa7b202fdb4119320f8d7fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f55272bedfa7b202fdb4119320f8d7fb_JaffaCakes118
Size

735KB
MD5

f55272bedfa7b202fdb4119320f8d7fb
SHA1

3e356e3903ce5f0f05ccacbaa012ca04eca7c68c
SHA256

28f0b752a05f1702c3697d3242f186b3acb81da954df8da0adb957a0cefeea1e
SHA512

60239b85967fe3d6bae2e8f7c05b3d2462beb27da5175b96d233aaaa6bf24e3cc62089965aa5c79065c9d2e248ee2be41f2a94f07a2f48ce83b19cdbfbf0528f
SSDEEP

12288:GWv1FlaSo1tsz1a1eXH/d3ZB4N7G2VW6ZUOi1GGE2l8oH/73lcI:GW9zLoI/d356Zmplp/73lc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f55272bedfa7b202fdb4119320f8d7fb_JaffaCakes118

Files

f55272bedfa7b202fdb4119320f8d7fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 702KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE