a118a17c330ff48fbad7daecebba8ee3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a118a17c330ff48fbad7daecebba8ee3_JaffaCakes118
Size

295KB
MD5

a118a17c330ff48fbad7daecebba8ee3
SHA1

732bcab1ab4636914872a6c6c9be12854566eef9
SHA256

0269504a892c4374f8bc153acadc717dfb174e8329cbb202b3ad38ebf0ac987d
SHA512

807315ddbbaefef85a47dda2b69738511e46c5b272b0901dc31db021b0841cd95a624e243920781951911a0f85bca36b81ba916ccb839270e09c096c8612224b
SSDEEP

6144:6j46ySQTf39qcWn8nKAshj4I4KdPOTxEhizUw2kIv4GugA1B+liz:6VC9oKRI4Xq40p4GJA1B+l6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a118a17c330ff48fbad7daecebba8ee3_JaffaCakes118

Files

a118a17c330ff48fbad7daecebba8ee3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d99e4ce75945006f401e61a545c1e99c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
lstrcatA
CreateFileA
CloseHandle

msvcrt

memcpy

Sections

.text
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ