2881efd83d972ddce4bc42cb7f62f1bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2881efd83d972ddce4bc42cb7f62f1bd_JaffaCakes118
Size

317KB
MD5

2881efd83d972ddce4bc42cb7f62f1bd
SHA1

bc66f0e25b412860e29e8fd65a50a0a9978755d6
SHA256

0ff279c9ce82dbd54297de9050b0a70d590ba39c911683b733a085f4a7c1fda7
SHA512

575d26662097b9b2125bfe6128f42a0387528e443f9e0221d647199325f7c97b0918599c746f0792ea0e8c424463fe7f4bccb5ea32a38986e38b30185793cd1e
SSDEEP

6144:OcxFz9ZQ/pDg71UUoWMijWDzdlAKNO3gIufl09VkB0OTZHMI:hr9ZQ/dOz1IzdrfIumVkB5ZD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2881efd83d972ddce4bc42cb7f62f1bd_JaffaCakes118

Files

2881efd83d972ddce4bc42cb7f62f1bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6dd099f94038702fea19812bbce41f87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA
LockResource
VirtualFree
LoadLibraryExW
FreeLibrary
CreateFileA
GetTempFileNameA
GetTempPathA
WriteFile
CloseHandle
GetTickCount
LoadResource
SizeofResource
FindResourceA
ExitProcess
MoveFileExW
MoveFileA
GetCommandLineW

user32

DefWindowProcA
BeginPaint
EndPaint
PostMessageA
PostQuitMessage
SetTimer
RegisterClassExA
LoadStringA
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
UpdateWindow

shell32

CommandLineToArgvW
SHGetFolderPathA

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ