161328f534b66f7648f0497ebab6339b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

161328f534b66f7648f0497ebab6339b_JaffaCakes118
Size

72KB
MD5

161328f534b66f7648f0497ebab6339b
SHA1

5a6cd991f995c31f66204f7842243189630db81b
SHA256

36830ed2f01dade982146f3411ca2001ddd4063ca92f1d686e9f3b53a31b107c
SHA512

32d421e0c9f8253f1ebb05b381598c57b51f325feb4ec3abc90601e2ed6f3fba2f77d84d4fb63f1e18c2efd027ebe0ec24365048befb0563d65711872eae62b5
SSDEEP

768:dgGx+J1u8MMpuECdF3uQVsCpBL+Jir0o/5lUNxbpywtqtjlKjg+3/8TecF5ZSNTk:6Gx+bZZydF311Fhr0M5laxvUC0ZZjBR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
161328f534b66f7648f0497ebab6339b_JaffaCakes118

Files

161328f534b66f7648f0497ebab6339b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1554f9e69f1aadda1e0d81e7e78be01d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressA
ExitProcess
GetDateFormatA
LoadLibraryExA
SetStdHandle
CompareStringA
HeapAlloc
lstrcmpA
GetVersionExA
IsDebuggerPresent
HeapFree
SetUnhandledExceptionFilter
GetCurrentDirectoryA
VirtualProtect
GetModuleHandleA
lstrlenA
GetFileSize
TlsAlloc
TerminateProcess
HeapCreate

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE