62918c22bb4faf31ff6b0ba2fa23c6b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62918c22bb4faf31ff6b0ba2fa23c6b3_JaffaCakes118
Size

31KB
MD5

62918c22bb4faf31ff6b0ba2fa23c6b3
SHA1

1c871faaf3a201ffa6246b300c0b6bdd2023116d
SHA256

bc1a26999c7ddb3af6143f5f3d72beb2ce11c74018570cc4596ef58bfd267ca5
SHA512

ed620e67b4dd0f5797b182cd1dd8e2d878ed174e85831e725f9b1ecb797109d32a8d98ecf3574982ddf68465bda22ea2f71e4fab41bb563b11c49193092e9831
SSDEEP

768:KU1BRvqjMumiUllgo+Sv4Zakc/qew1J15PoIo:KUQjMumPvgKvIdc/qZN5w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62918c22bb4faf31ff6b0ba2fa23c6b3_JaffaCakes118

Files

62918c22bb4faf31ff6b0ba2fa23c6b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

525be60ad72508dfccfda6d4c82e95dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
lstrcpyA
CreateFileA
lstrlenA
lstrcpynA
WriteFile
lstrcatA
ExitProcess
lstrcmpA
GetCommandLineA
CreateProcessA
GetTempFileNameA
OpenMutexA
GetModuleFileNameA
CreateMutexA
GetTempPathA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
GetVersionExA
VirtualQuery
TerminateProcess
GetCurrentProcess
IsDebuggerPresent

user32

wsprintfA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ