32a237a355b794e9709e508164fa716b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32a237a355b794e9709e508164fa716b_JaffaCakes118
Size

37KB
MD5

32a237a355b794e9709e508164fa716b
SHA1

7ee854d2e825e50fdff46774d79111ed4e2dccfe
SHA256

896845cc780174bffeee473ce716129923bcf4471a53dec2cab21f512aade6e3
SHA512

5838cacd61dca10ec7a9dfa4c2ff244ee7835f1901cdc0c4ae34b8ff16f73fef6756a58ae6d1ed4e94cc4f239cf2c53fbbd81aa16d10ca51817f3f75c25b2cbf
SSDEEP

768:yvdLhmZ+bcaI+/tKyfo1YF/mrv68/LT71iRW24LthxsKnw:tXW/ttfiIKnw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32a237a355b794e9709e508164fa716b_JaffaCakes118

Files

32a237a355b794e9709e508164fa716b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3f89a7f6c6cd2e7abd0ff3d34940ef5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
lstrcatA
OutputDebugStringA
LoadLibraryA
GetProcAddress
LocalFileTimeToFileTime
FreeLibrary
ExitProcess
GetModuleHandleA
GetSystemDirectoryA
SetFileTime

shell32

ShellExecuteA

msvcrt

??2@YAPAXI@Z

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ