739cf695fcd4a0e4f5ae48c903a59318_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

739cf695fcd4a0e4f5ae48c903a59318_JaffaCakes118
Size

381KB
MD5

739cf695fcd4a0e4f5ae48c903a59318
SHA1

efab570db01ae689fb8262b57c1719782f0f051f
SHA256

865aa1255668273889d1a51c87cd9764a26be4578d0ed0fdfa819d938d0edf33
SHA512

2a1e075371b90c70450d9f68778981ba743866046e20fb97d9b130a44c1b173b55c551f949120188451aeca4c3bde36fa545d241c8f81535ac0feed779eae96d
SSDEEP

6144:qY8O1yaV8rGTofjWPcQpezKeC1U99fgcu8C/ap/FM62jIsOxwyt:qYB1CrUo7WPcCeWr1UJu8PS/Msk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
739cf695fcd4a0e4f5ae48c903a59318_JaffaCakes118

Files

739cf695fcd4a0e4f5ae48c903a59318_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e8c03edf7de3e2230621f798163370a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetLocalTime
LoadLibraryA
GetProcAddress
lstrcatA
CreateFileA
CloseHandle

msvcrt

memcpy

Sections

.text
Size: 377KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ