2a664341253fbb54d0392d3072d6aa84_JaffaCakes118 | Triage

Sharing

General

Target

2a664341253fbb54d0392d3072d6aa84_JaffaCakes118
Size

303KB
MD5

2a664341253fbb54d0392d3072d6aa84
SHA1

88fbf4f1729897838f909cf3cfb0b28f4c8425ed
SHA256

4c283750d4cc722d2bb2bfee517806fc25621ee31f7431ffe89980862b247ccd
SHA512

912ea16ff994407c1d63883fa3b0735f25abb06139118c2a0360a2ab4960174cfbc708c4fec29580a7aef1f0c78bf5d7c6e8f6d1142265222b0cbe543038c4e7
SSDEEP

6144:rJfwSdp00nYq1tcmq+WLSTTSZHA/R9KBP8FdbJEroj6SL:9fRnYq0mq9L8mHA/R9KuFdl6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a664341253fbb54d0392d3072d6aa84_JaffaCakes118

Files

2a664341253fbb54d0392d3072d6aa84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f3253d89c52698bfd4842d733fdc827

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
CreateFileA
CloseHandle
WriteFile
GetSystemDirectoryA
GetFileTime
SetFileTime
GetWindowsDirectoryA
lstrcatA
FreeLibrary

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.alloy32
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.alloy32
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE