711438b43c20323b4fc349dae2710510_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

711438b43c20323b4fc349dae2710510_JaffaCakes118
Size

156KB
MD5

711438b43c20323b4fc349dae2710510
SHA1

8c69592c406fd96d82b4dfba2e563015c0c7c325
SHA256

ed92f60d868f314185fc535fb80294de13bb894dea4a8712c9b0649aebbb9503
SHA512

4468a752a3b0be2ba86c9e3e88f91617f8dd4d58ff9d0ead6e779283568cb62d09b91cfd21d3c9b7dcc678e0febddd88f1ab61e8ac9eb45bad987460acd14a30
SSDEEP

3072:I7gwVtfWOkZz+JZImo+HnsDFDAyyThRj29oWprTPb0e71Flga8/4FXG:I7gwVQtZsHsZDA5jGBdoe71Flga8A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
711438b43c20323b4fc349dae2710510_JaffaCakes118

Files

711438b43c20323b4fc349dae2710510_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68f579ed3797e30b2d2c0d5e9960c620

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
Sleep
LoadLibraryA
MoveFileExA
GetModuleFileNameA
GetExitCodeThread
WaitForSingleObject
CreateThread
GetProcAddress

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE