742b9e29e748234e30b5f69999ee766d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

742b9e29e748234e30b5f69999ee766d_JaffaCakes118
Size

5.8MB
MD5

742b9e29e748234e30b5f69999ee766d
SHA1

cfc11e40c0879df978a21ee73ee300b9fb0e743d
SHA256

4153ba52a540a3926973336da4f4e6cd75b62ff5a633b8a307693af0ef60b4de
SHA512

0c8f714609486fa394a1ea19e662921951d7079ac80903bdc88aca202dee34db761f93ec6fce3531d3559b0692e00f8a70c57c01b94b7d1ecd40aa05a1cc597c
SSDEEP

98304:CmOZRw+TO/U7maKouhE3QoF4UQw4EbyD/TcpMm5ApNJz6Imx6NQY6r08kNtql:gRw+K/S1uKrAJ/4Mm5WHz6bkCrLsQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
742b9e29e748234e30b5f69999ee766d_JaffaCakes118

Files

742b9e29e748234e30b5f69999ee766d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f0267c12108a175e563cb54160a6c8bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetModuleFileNameA
CreateFileA
GetFileSize
ReadFile
GetWindowsDirectoryA
WriteFile
CloseHandle
Sleep
LocalFree
ExitProcess

user32

wsprintfA

shell32

ShellExecuteA

Sections

.data
Size: - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ