67fafc23a26bf0a0af4572462323da79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67fafc23a26bf0a0af4572462323da79_JaffaCakes118
Size

19KB
MD5

67fafc23a26bf0a0af4572462323da79
SHA1

96a983fa2bc0433489062525affea83b4b949ca0
SHA256

ea7643c449cd070ab7abb4e92941e608f985a4c0b8fa0d07edfa431ce58e08b2
SHA512

ada56821b07f977789cb3370051a1cd0055939dd2b851ced3367ac269543155686a0a8d823306afc6c8db52b03e458785dada7517fd84a99bc80dbd5bb88d655
SSDEEP

384:HXZgx09oAWA2X3fMBs2aVlAZmd5xGMDsad6c7S9KI5Sxq2:HJC09oc2/MBsNlDd5V9/S9KI5iq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67fafc23a26bf0a0af4572462323da79_JaffaCakes118

Files

67fafc23a26bf0a0af4572462323da79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88f6391339477fb6b9354dd99a11c038

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
CloseHandle
CreateFileA
ExitProcess
FindFirstFileA
FindResourceA
FreeLibrary
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetTempFileNameA
GetTempPathA
GetTickCount
GetWindowsDirectoryA
HeapAlloc
HeapFree
LoadLibraryA
LoadResource
ReadFile
SetFileAttributesA
SizeofResource
WinExec
WriteFile

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ