739eceb56ca53357a454d02046bd93c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

739eceb56ca53357a454d02046bd93c5_JaffaCakes118
Size

85KB
MD5

739eceb56ca53357a454d02046bd93c5
SHA1

9af78b77a81903a6edfe25120200b3811d28d0a8
SHA256

0c6b9b04e920df84a6c33a27cc7e87b50ee40652a5ca9855a99a6865e1ef905a
SHA512

3557b35c03b5ee53d1493ef7418b7d1f8acdce67a8a68fc44e1bb3fb643aa64600420315e12def3f73fca29dba01e6deb213a7f4ba20494b99248bded948f453
SSDEEP

1536:g5hjPb+tO4iRJcuRTJU4wvwDfA2HW7/p0AsSIyP9UmhB7PlCoZv5Uw:4j+/iEuRTKv4I7/eZSwmbh95L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
739eceb56ca53357a454d02046bd93c5_JaffaCakes118

Files

739eceb56ca53357a454d02046bd93c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c554c60dac1b669b8c57a1a54d993f26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetModuleFileNameA
LoadResource
SizeofResource
FindResourceA
WinExec
GetLocalTime
CreateMutexA
OpenMutexA
LockResource

msvcrt

memset

Sections

.text
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ