855a7594551700a7ef20357da00fcbcf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

855a7594551700a7ef20357da00fcbcf_JaffaCakes118
Size

86KB
MD5

855a7594551700a7ef20357da00fcbcf
SHA1

1456f69379a444cee6dbc5cc5ce605230f2bd79e
SHA256

9f82acab41a1b2c8afe428a37bfc8bc8926073b32e32870e600b36031b22e0cf
SHA512

71496131aab3473227cd2440939f41e3fbdbebeb55b03daa34a5d4c3526dbcf0c3d66efe56761c2fbad431fe77fa8b81e0984e87fc2a28a9ec43f0f43cab01f9
SSDEEP

768:5fx5z/W423PtfoxHZcIiR0zc/G+lJWU3Mwrw5CdXe9x6hAip05bjvIz8I8tIwEaq:lHkG+d35c9xN3oLxAcuX94ZRr+1J2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
855a7594551700a7ef20357da00fcbcf_JaffaCakes118

Files

855a7594551700a7ef20357da00fcbcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE