1a749adc67729de71f5573cc54469557_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a749adc67729de71f5573cc54469557_JaffaCakes118
Size

37KB
MD5

1a749adc67729de71f5573cc54469557
SHA1

e1967fe4c9fee82f58b890415799564784384934
SHA256

512c88976d9abcff3671468ad375146dc2b59e173e48aca5202730135069a50c
SHA512

d1dec029d4056b1937ca97b1f4c2ff45b5bbf21a212c8f7ec7affdd7a03103ed0ce1159a462715d4963701f3e42c2665411e046b64b398238a55553cc81ea2be
SSDEEP

768:wcbwhn96NMRtTWY8Vur9vHxA0C/b2gPHvvZeZ6yI7xFF76rKX:wcbwhn76Zu1xw6rKX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a749adc67729de71f5573cc54469557_JaffaCakes118

Files

1a749adc67729de71f5573cc54469557_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfd95a433c600ee54a8efbdace696b33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
lstrcatA
LoadLibraryA
GetProcAddress
LocalFileTimeToFileTime
ExitProcess
GetModuleHandleA
FreeLibrary
GetSystemDirectoryA
SetFileTime

shell32

ShellExecuteA

msvcrt

??2@YAPAXI@Z

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ