3144fcf975b91223759f43f35bbdb860_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3144fcf975b91223759f43f35bbdb860_JaffaCakes118
Size

24KB
MD5

3144fcf975b91223759f43f35bbdb860
SHA1

4c5afe5a414ce8ab27fd94e39ad7927831e9cba8
SHA256

dfdc7e3ca0ddcae1fd1f16701d9bc518d4793843173752f1f7fafea96816724a
SHA512

4e3ec8d7d843965eb20d0c6840983370919e2826f8b293f339f38bd0056f6d7f71d110f7595b7437e2873369bda810653f7e1a433ffc692f2e82b6d15d249939
SSDEEP

384:GFwGqM61BPAZlcZSDieoarnCjUo/Fs4hEYyOHvGFE+RS8JzM4BF:2wGqM2YIZSDieo6nCjUoNs4t2lRzBF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3144fcf975b91223759f43f35bbdb860_JaffaCakes118

Files

3144fcf975b91223759f43f35bbdb860_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7a01c71edc3f428af7f232e1f01b637

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
SetFilePointer
MoveFileExA
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
Sleep
CreateProcessA
ReadFile
GetSystemDirectoryA
lstrcatA
GetShortPathNameA
CreateDirectoryA
GetStartupInfoA
FindFirstFileA
GetLastError
lstrcmpiA
GetProcAddress
GetTempFileNameA
LoadLibraryA
GetModuleFileNameA
CreateMutexA
CloseHandle
GetFileInformationByHandle
GetTempPathA
DeleteFileA

user32

wsprintfA

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE