6257c81bebdf792ae2a7cde35e6fda1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6257c81bebdf792ae2a7cde35e6fda1b_JaffaCakes118
Size

37KB
MD5

6257c81bebdf792ae2a7cde35e6fda1b
SHA1

bb8113b7728c5c0cba67f77052ad026a6d449eb2
SHA256

73e8415f63dba90087fb4801511c1522d19c2a8daf1bb72b7183f526f93110e5
SHA512

f2953b305d32cf334bf37c601d5e701dfc09777f4244b34e876a12051fb7488331680f5e3f90b7765a496825fd8e84f9d61e64327a5985311fcd66907e2ef1f5
SSDEEP

768:qlpjh4utDryh99oZM7jmEe4ZvUgNaAOmoTT3wjyXD:qjhTJryh99oZMxZvUAGm8TA2z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6257c81bebdf792ae2a7cde35e6fda1b_JaffaCakes118

Files

6257c81bebdf792ae2a7cde35e6fda1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE