755a8abd8936945385d5f1195648e978_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

755a8abd8936945385d5f1195648e978_JaffaCakes118
Size

36KB
MD5

755a8abd8936945385d5f1195648e978
SHA1

ef7773ba2bc2a1b79609a2292efd473d083a71ed
SHA256

28be1af3c172303942cab9f4236e8e6b24ee86780a34bfcd41cd3dc2129c8d12
SHA512

e7ecb25767690beb871ac01fa63ec19f5bd7dd47abbb5a33d956892579daeb9675085fd9d1e6547051390c8229489fb977fe771a177cc721a420da701f575eff
SSDEEP

768:qBcap7A5NLb6yUHEbp+Vv9ovr4KYR8qgwZwg3kX1WxXdu3:EruSHEnvKJlPkX1g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
755a8abd8936945385d5f1195648e978_JaffaCakes118

Files

755a8abd8936945385d5f1195648e978_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2eec1c7bbfcf3210a5c44176072434b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalAppExitA
GetEnvironmentStrings
GetDriveTypeA
FreeEnvironmentStringsW
lstrcatA
GetCurrentDirectoryA
CreateFileMappingA

msvcrt

strspn
rand
srand
atol
abs
fseek
wcsncat
_wcslwr
_pctype
wcsncmp
wcsncpy
_waccess
strcat
_access

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ