3107087a28f110c6ed2f19b0f0401ccc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3107087a28f110c6ed2f19b0f0401ccc_JaffaCakes118
Size

5KB
MD5

3107087a28f110c6ed2f19b0f0401ccc
SHA1

626c7e7b301dd742b67c7c9c798745a28bd244d1
SHA256

e050994ba4fc02c24d3325d025bf5b92da88e6068dad678cd627b48da3f6dd6c
SHA512

58998a0267a3d65b9769975b4d67b6dace197e1a3321ce01fe445623082044c13c7e2c064729ccd00e4e32a124edbe31c79540f7d828e4b4c631ec12ffaa619b
SSDEEP

48:Kg2O5Wlg8JSlkZ3afg+TZPagxS2usXH7OHpYcDMncDGkjA0B03sGzUgCIftkY5xp:yzW8J20i1Wpg7OHp1Icn9QsG7jtkYNY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3107087a28f110c6ed2f19b0f0401ccc_JaffaCakes118

Files

3107087a28f110c6ed2f19b0f0401ccc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5543b4be1a6e5218e025f64dcf24fca4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCurrentDirectoryA
GetDriveTypeA
GetModuleFileNameA
GetProcAddress
GetSystemTimeAsFileTime
GetTempPathA
GetVersion
LoadLibraryA
MoveFileA
ReadFile
SetCurrentDirectoryA
Sleep
WriteFile
lstrcatA
lstrcpyA
lstrlenA

user32

wsprintfA

shlwapi

SHGetValueA
SHSetValueA

wsock32

inet_addr

mpr

WNetCloseEnum
WNetOpenEnumA
WNetEnumResourceA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE