21dd3612fa2bb61befa608b494fe835c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21dd3612fa2bb61befa608b494fe835c_JaffaCakes118
Size

619KB
MD5

21dd3612fa2bb61befa608b494fe835c
SHA1

ab491df37a450987ba483f30e198fb67d1cb4818
SHA256

e01fa6aaf16d8088b531f592efdd47deef0db2d7560048e51fd159692627a8aa
SHA512

b50cd22673965afc5044e581c5be226ab6b2ccde86220d4f3d02457cf74994c29af7d87605581e384e3ee67b3d04fa34ade90b0848c110bb9c609fc17c66e14e
SSDEEP

6144:qe2qx5PTlloqiPR+dKidZ4lFx2ddLKW2Bv3sZZRDIR:qevxVDJdi3BvsZPDO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21dd3612fa2bb61befa608b494fe835c_JaffaCakes118

Files

21dd3612fa2bb61befa608b494fe835c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 1024B - Virtual size: 918B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE