478353c34ce458f183ce0179f7684abb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

478353c34ce458f183ce0179f7684abb_JaffaCakes118
Size

290KB
MD5

478353c34ce458f183ce0179f7684abb
SHA1

913778127a3f253a786fc9a8557714f49a2576f8
SHA256

1472cb93b29c386edda458311cc410a7c38fbcd645996b2a1dc18052f27a5ab6
SHA512

2431ad8a8b61e424e9de2fdb7f94512397dfe174f308b35245962c51b608b4f7d6eaf696e28b0ac12170ad6ebe803bac3d5c9552d725ec2e09940b6a67c741cc
SSDEEP

6144:e0XRxqjvPDBdIPJZleIgAwduIbmDDQeboUtFkZuqqV:e02nY7leIGJq9DWsV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
478353c34ce458f183ce0179f7684abb_JaffaCakes118

Files

478353c34ce458f183ce0179f7684abb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d8ae4e0a8eab9b1ba60a3bb52920a94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetLocalTime
VirtualAllocEx
GetWindowsDirectoryA
CreateFileA
lstrcatA
CloseHandle

msvcrt

memcpy

Sections

.text
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ