292c1f898ea18b4c3e638457bd249aae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

292c1f898ea18b4c3e638457bd249aae_JaffaCakes118
Size

345KB
MD5

292c1f898ea18b4c3e638457bd249aae
SHA1

361fce8a2ae64979df8ff90ef4911538ce0c815c
SHA256

f582abd2086864a71da49c38901551f467cfb10e38bedcbd14449dd82f540e5b
SHA512

7f3765a986f6f31200cf0ce08090eb5d73ae4d4031723085ff7853d0b662c92ca8b0871c83e29e0e4fe0b4302eb8fec7d3080caff848e7b0fc5f4063128fd5cc
SSDEEP

6144:z5c7G22OxGaXeGFdQTCksaSFLuaK75Ykix0U+moJnLOanwmd67q/dly78GKsLZV0:J7saoSa6Gni3JLOanM70lyHDKbw1QNf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
292c1f898ea18b4c3e638457bd249aae_JaffaCakes118

Files

292c1f898ea18b4c3e638457bd249aae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a291e597397c15bd8af469f63538fef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kokko123

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 14KB - Virtual size:

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE