7098387b273341b27874fd74d4877762_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7098387b273341b27874fd74d4877762_JaffaCakes118
Size

37KB
MD5

7098387b273341b27874fd74d4877762
SHA1

235c5ae00363cece057cfe2248ef7747d3295cda
SHA256

fa87f4b6a1bdfcf2e80933ce5c97392a5f7b72635cb5d23be0111a9c7cd73cec
SHA512

af53feceb5e859819e69a6b08d94d5db879cfea6c52c9ed223a5508256a023bc3a95a17cbdb3d6153d71c7b91f93cf0ef87629b3a6d618c41569cee92223733a
SSDEEP

768:ELFXN3znhqNRY2TLlPB68LN5daAH4lY+TqZFPAkTlyZu6UmiSiD6rKf:ExdhoYmPw8I5I6rKf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7098387b273341b27874fd74d4877762_JaffaCakes118

Files

7098387b273341b27874fd74d4877762_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2cdf7b2aa4fd4c550fd2857eb415480

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
lstrcatA
LoadLibraryA
GetProcAddress
LocalFileTimeToFileTime
FreeLibrary
ExitProcess
GetModuleHandleA
GetSystemDirectoryA
SetFileTime

shell32

ShellExecuteA

msvcrt

??2@YAPAXI@Z

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ