14ea33049ffa0593d128eef53ee17fda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14ea33049ffa0593d128eef53ee17fda_JaffaCakes118
Size

64KB
MD5

14ea33049ffa0593d128eef53ee17fda
SHA1

b12108070666c8b00c21800d0b56cca50cba1211
SHA256

bdb2e97294d2898d884a922914c4ca9cc7fc3b3cc3d12e26f7a14aac075442d9
SHA512

3f44b1e09c6b3f64573f213896e76c12567f82995d59d68ce1fdad9ce3936dff75a2f40cb6160bec68059a24e80aed2ebcba7dd6688f79e6453c6de3a064ecd8
SSDEEP

1536:2O9s5+4CWR4CLOlf2u6qtwouTNywV489xmahoOL:Rm5+pos/uTv3DNh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14ea33049ffa0593d128eef53ee17fda_JaffaCakes118

Files

14ea33049ffa0593d128eef53ee17fda_JaffaCakes118
.exe windows:4 windows x86 arch:x86

92ad75cb2f62d68e1ffe55b4a02f28ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

aclui.dll

CreateSecurityPage

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE