785ffa1ad35dc90a4f6e332a1875cc66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

785ffa1ad35dc90a4f6e332a1875cc66_JaffaCakes118
Size

8KB
MD5

785ffa1ad35dc90a4f6e332a1875cc66
SHA1

86e333b62e4884926a851fe9629b5ea30dbac020
SHA256

e7fb11eae85d5c785e66dce13c27e0dfee4fbd48484023b4ecb6fd2fe80a0e49
SHA512

935e7a9a4dd2db3ec883ae0f10c7373b78cb59bb154a2fa2da07ea7d8202351f5703fd798fac7f83066c27edcb920ede7cbfbc25772bda190c5c4a82e4652e46
SSDEEP

96:xi01TkW255JN8z4pr1TSYu8mHKOz+xUOMAJbyUPD1SzHiOZejQV+0LmSJiP8:8iy53a4prBSt8mqEiZMsh1L0KKiP8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
785ffa1ad35dc90a4f6e332a1875cc66_JaffaCakes118

Files

785ffa1ad35dc90a4f6e332a1875cc66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39c1c1e133049efbb63f435203cda623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetFileSize
GetLogicalDrives
GlobalAlloc
GlobalFree
ReadFile
SetErrorMode
SetFilePointer
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ