740a0e4a265980c26b2da27453c66917_JaffaCakes118 | Triage

Sharing

General

Target

740a0e4a265980c26b2da27453c66917_JaffaCakes118
Size

59KB
MD5

740a0e4a265980c26b2da27453c66917
SHA1

9046bfda8466b0a0139f53b4ab5db233179e5440
SHA256

f0606055b02e1083185fff448749b7a25e6fb5d2761de399153339d7bb54b1a6
SHA512

f6b70a43a1217610853db815128aae55795ac7d7583b482539b69c325db13b245548960995e7850283ed7ab1916799e54f9b06f4bf83789f5f5e55daf0776f6f
SSDEEP

1536:GL9H+2CM8vwubHe68+uMD+Gke4HhPuHRQMf9RDfwLinWY:+1+tdb+6WMqG54Juxhf9FIL0WY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
740a0e4a265980c26b2da27453c66917_JaffaCakes118

Files

740a0e4a265980c26b2da27453c66917_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41d24f8a32985d6841fb165bb8cab639

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
GetFileInformationByHandle
OutputDebugStringA
FormatMessageA
GetFileAttributesExW
GetLongPathNameA
GetUserDefaultLCID
FileTimeToLocalFileTime
IsBadStringPtrA
FreeLibrary
GetOEMCP
ReleaseMutex
TlsGetValue
VerifyVersionInfoA
_llseek
GetFileAttributesExA
OpenEventW
LoadLibraryW
GetProfileIntA
GetLongPathNameW
lstrcpynA
GetNumberFormatW
GetAtomNameW
SleepEx
GetLocaleInfoA
GetTimeFormatA
TlsAlloc
VirtualProtect
GetLongPathNameA
LoadLibraryExW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 837B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ