2667d9b85ef43e0c3a8481bec7bc074b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2667d9b85ef43e0c3a8481bec7bc074b_JaffaCakes118
Size

689KB
MD5

2667d9b85ef43e0c3a8481bec7bc074b
SHA1

7b59375bfbeba31b0ea695f2fea323f110fccb14
SHA256

33da4a05ef5d940435599e0ba5dbaffce8dfe3f745dc7fb2c728b3fdeeb73c11
SHA512

157e6e03c9ee1abe7e9f8f8f9906dfac1fb0bb46014faa0e17ea8df530153f886c36938869fb50f1f8554ca309dddf4fd6c6b63741c134fb69b356db71232c41
SSDEEP

12288:oSIHAkW2mNronFQplY0HxtMiAfsZA3x3wRXot9tLm0MVbODKrLqoVJwA8c:k5nIK0H33AfjB3YXitLm0MV0OLqofwA9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2667d9b85ef43e0c3a8481bec7bc074b_JaffaCakes118

Files

2667d9b85ef43e0c3a8481bec7bc074b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE