6499322aefc973790c36cf95d60e4144_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6499322aefc973790c36cf95d60e4144_JaffaCakes118
Size

29KB
MD5

6499322aefc973790c36cf95d60e4144
SHA1

5800541673171a487f3e60ecc8bda831e6b77daf
SHA256

e9c151fc0ea3a8d0b2d41fc133e504d45d556d334d4ac3b3ecf9c8e6782838b2
SHA512

9379b6088599b7f668d31fc8a2d2a0d51b094fecc5f40dfb6a9a8d6b5334c007ece6f324533e035c771c36d1e5c69358b6a703daa32f431a963195c2a9263460
SSDEEP

384:vJe6xxfgm0fei2BfuHgm6aNaw/nOKyTLRZkzuKJqJrwRoyvLf9WEErW:Re65Eef0kaNXOtQCKJqNyvc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6499322aefc973790c36cf95d60e4144_JaffaCakes118

Files

6499322aefc973790c36cf95d60e4144_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51be0c21243c78c3fe8b0f705c4eab47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
lstrlenA
lstrcatA
GetEnvironmentVariableA
WinExec
Sleep
CloseHandle
WriteFile
CreateFileA
CopyFileA
GetSystemDirectoryA
GetVersion
SetFileTime
GetLastError
GetFileTime
GetWindowsDirectoryA
Process32Next
Process32First
CreateToolhelp32Snapshot

msvcrt

malloc
memmove
??2@YAPAXI@Z
_strrev
_strdup
_strupr
free

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 645B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE