71b5b3509b26c20edf1f0971efb33f19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71b5b3509b26c20edf1f0971efb33f19_JaffaCakes118
Size

238KB
MD5

71b5b3509b26c20edf1f0971efb33f19
SHA1

3bf0480a0115a46b07c9667eca7a007c64919e2d
SHA256

34192daae471341c3562f152662ab2755966d7322175f57141782d754f1d25c3
SHA512

3a56a61c55e99d831fe57922b76268898380581fd0d5e1fe0dfd1d99048c64b2d47dc8861b177f9ec49edecf0c198869ec5887ba481ebf134dbf6cb567b1b0c8
SSDEEP

6144:OH+zxu2rQ0ox4x0GJ57b5sc/oGoCuhcHmZnfN9n:i+zf/U4+0lo92H4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71b5b3509b26c20edf1f0971efb33f19_JaffaCakes118

Files

71b5b3509b26c20edf1f0971efb33f19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

639d56db9922ebc59fce911df65d1973

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
GetSystemDirectoryA
CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateProcessA
GetModuleFileNameA

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ