65e4bd4dddd164e3f331d677922ee288_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65e4bd4dddd164e3f331d677922ee288_JaffaCakes118
Size

140KB
MD5

65e4bd4dddd164e3f331d677922ee288
SHA1

85965146d0c1b702171e6f958c890d51b81b4207
SHA256

7ea4591a4ba94d2be4346b3af502bf6d34bcf98ae05a040907c8d7bac28cbc01
SHA512

1bcd51b7163cde92eaa2dcef8bded035f76948880395346c1c61641935e6ebde61b50972d0c3f1887eeec3f75df80d340423e5d5b65e411ac57c5e1e979e6bf1
SSDEEP

1536:3+NJAPod8leLLLLLLLLLLLLL4YbTBxupuHG6+/efOtNLLLLLLLLLfKotE8Bq4tBz:3+NJA0JxOuHx+/efOrKo3876NCf/Xey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65e4bd4dddd164e3f331d677922ee288_JaffaCakes118

Files

65e4bd4dddd164e3f331d677922ee288_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e4510e7fce429b13a61eb2314890283e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetLastError
CreateDirectoryA
CreateProcessA
MoveFileA
DeleteFileA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
WaitForSingleObject
CreateMutexA
GetModuleHandleA
GetStartupInfoA

msvcrt

_initterm
??2@YAPAXI@Z
__CxxFrameHandler
strstr
_vsnprintf
_beginthread
_exit
_XcptFilter
exit
_acmdln
__getmainargs
??3@YAXPAX@Z
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ