a1b1fdb23696e08a38068a8c3d5d08c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1b1fdb23696e08a38068a8c3d5d08c8_JaffaCakes118
Size

62KB
MD5

a1b1fdb23696e08a38068a8c3d5d08c8
SHA1

d9d7dcbadfbafb9c96125db9fe2f10fcb3525ec6
SHA256

cd23efeceab07048af845e8d50552cc7fc40fb3c4f87f7fdc957e83f453ab2fc
SHA512

413c7d74cd9cf298a04a9f5acaf6d812416b6fdf703095d123aa7b62cdc0d4d170ec7a9d01bffbcadcd86e606accf1cd25fb5af80e99f81ae92327d471c52a06
SSDEEP

1536:zesR9fDc7G2G5nr3OxGaXeGFdQTWBuC1aCHP+D5C5Z2:9R9fDc7G22OxGaXeGFdQTuuC1e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1b1fdb23696e08a38068a8c3d5d08c8_JaffaCakes118

Files

a1b1fdb23696e08a38068a8c3d5d08c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 14KB - Virtual size:

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE