3aa331492c5f33dcd9086cc8b8d5de8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3aa331492c5f33dcd9086cc8b8d5de8f_JaffaCakes118
Size

4KB
MD5

3aa331492c5f33dcd9086cc8b8d5de8f
SHA1

06ccc8585dece581533b2ecb4b70a8b666521040
SHA256

481a8e949ab14805626ed487810625d24230a39451690878a600ab856998efcf
SHA512

d1f04649889e557946f3f457a40d1f33df14bf330e09df90e50989699975bf69543fb9a417d41229e47a8fe7607c2c7841e5253568ad7eac49783a5ae6c5f8d7
SSDEEP

96:KkJGQN8XoqYyDmEHzaIcn9QsG7jtkYNY:KkJlv6qei9y1PN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aa331492c5f33dcd9086cc8b8d5de8f_JaffaCakes118

Files

3aa331492c5f33dcd9086cc8b8d5de8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5543b4be1a6e5218e025f64dcf24fca4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCurrentDirectoryA
GetDriveTypeA
GetModuleFileNameA
GetProcAddress
GetSystemTimeAsFileTime
GetTempPathA
GetVersion
LoadLibraryA
MoveFileA
ReadFile
SetCurrentDirectoryA
Sleep
WriteFile
lstrcatA
lstrcpyA
lstrlenA

user32

wsprintfA

shlwapi

SHGetValueA
SHSetValueA

wsock32

inet_addr

mpr

WNetCloseEnum
WNetOpenEnumA
WNetEnumResourceA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE