848a3749b3042f4bd33346bb13b5f3bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

848a3749b3042f4bd33346bb13b5f3bb_JaffaCakes118
Size

292KB
MD5

848a3749b3042f4bd33346bb13b5f3bb
SHA1

49f4a7a4f797f466647398519061a0dfeda544e4
SHA256

40c98064b02e2f503526b6c5dce26fcb5f1fdf5676023ea5360f56047a1ba597
SHA512

58ad128111992cda612c6201c9240d8ac2cdb36dd40504590154cc86cc16af9568be21ac62b654aa39a8bfe5e59c946f30bee4bbd22a2182917ae1ce4f233928
SSDEEP

6144:gMAz9fL9/GoBtUlB6M12LUchvB/SWB/EhIzou:gMs9fRtW2LT76Kou

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
848a3749b3042f4bd33346bb13b5f3bb_JaffaCakes118

Files

848a3749b3042f4bd33346bb13b5f3bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68777fb9ac6ba36cb07513c6f9f7ab7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
CreateFileA
lstrcatA
CloseHandle

msvcrt

memcpy

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rtext
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ