72e622e7f58330f260917f4940b7738e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72e622e7f58330f260917f4940b7738e_JaffaCakes118
Size

100KB
MD5

72e622e7f58330f260917f4940b7738e
SHA1

7e84e7cb90d5e651cbb318c566c445d9fa16dd64
SHA256

2eb4e367ac80e206bc456f4d70be59ced95299e160f9b09c6b5473861810afb3
SHA512

ad25354f120ac6e27615e70243b4aede12dc02fffb416954c6b71bfc91574e75ac127d940597fc56e3499cb890f7d674af98957a5afb34a5e294efd54209bbb8
SSDEEP

1536:vScE5pSPWIUD0IOi7tmpjXV0ppODldztbQG7c+qz1Rtoiy/hO5/M2:vypSP1OpKjyODlvcAc7rI4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72e622e7f58330f260917f4940b7738e_JaffaCakes118

Files

72e622e7f58330f260917f4940b7738e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE