0a03ab2d338193ed39a7c5bd0fa1b20d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a03ab2d338193ed39a7c5bd0fa1b20d_JaffaCakes118
Size

340KB
MD5

0a03ab2d338193ed39a7c5bd0fa1b20d
SHA1

ca71296f79e0ed2c3bfb81804f5c0552fac19ca1
SHA256

f3a0c86ca15416168f987a9231f398a095370bb92a23dae39b3b506570c668f5
SHA512

e4a3387331ada6c3981af7ce126d941c52c4c36244933ea7378338b9c95bced4ad688c96149bbb01e51795191ee76b3e2d62326939777f52b1f198677387d6c7
SSDEEP

6144:yF4jPUh/a5CSOgNzBz7r1tCGm4ieCPe+55otj0LngypZkT0t3Uk7O:ykTCSOgToO+55EjUdSsEkK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a03ab2d338193ed39a7c5bd0fa1b20d_JaffaCakes118

Files

0a03ab2d338193ed39a7c5bd0fa1b20d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE