272556b74079d0c33a9c34e9af41a7a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

272556b74079d0c33a9c34e9af41a7a9_JaffaCakes118
Size

90KB
MD5

272556b74079d0c33a9c34e9af41a7a9
SHA1

e79d9d3310743d7fe72f1bdefba271a025b80665
SHA256

17b222eb41c720ac99263ddf21f34ac71380fd00be71f05913cdd2070ba7cb49
SHA512

0455b9854c07c1124c54c3f28de883982fd2c9697625c1ce3e3d50926197698f64d84da9c8487ae44f8bb43a7b8fa7811a742dc773234bfb8f15e7277fda3326
SSDEEP

1536:yZMe6ME+xlNDM1lSLKwjeNykfvIrpTtzfFUvU/xZ/CYyPB27MTQCFTU8P:yZx6MPxDm8jeNycIrpTtRYunK3B2Qs+H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
272556b74079d0c33a9c34e9af41a7a9_JaffaCakes118

Files

272556b74079d0c33a9c34e9af41a7a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

75c35c8a223891f9ad0a98818c9c91f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
WriteFile
CloseHandle
CreateFileA
CreateMutexA
CreateThread
ExitProcess
ExitThread
FindResourceExA
FreeResource
GetModuleHandleA
GetWindowsDirectoryA
LoadResource
WinExec
SizeofResource
Sleep
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WaitForSingleObject

shell32

ShellExecuteA
FreeIconList
SHGetFolderPathA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 674B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ