a2745fe49e3e6600014863fc4e782f01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2745fe49e3e6600014863fc4e782f01_JaffaCakes118
Size

1.4MB
MD5

a2745fe49e3e6600014863fc4e782f01
SHA1

d7dcfdd6a59774cec6e855557297a6878e6bc3ce
SHA256

0d04f45bc22f041d1cbaa92014f3db242b9164717f177a73457261a392bb9bc0
SHA512

a6feee16d0c5ff9b61626209be515454bb134cf7ecc0872cee44d5428df0e60cfcf59bdcc29f5fb5f5cbb70f74053126a79d787dd98e3e75b63d8ab5145d748e
SSDEEP

24576:WDINuR3Pvm3xx7DElYV5Mmb3CtaDEB1NZrMeVu++QpppiO4zb3toqcbg0hzubML1:WDjnw77H3dKyyppiOm3toHsq0G2HxTtm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2745fe49e3e6600014863fc4e782f01_JaffaCakes118

Files

a2745fe49e3e6600014863fc4e782f01_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6da9690f666fa4146b9381dbb95392d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
SetFilePointer
FreeResource
GetLocalTime
CreateFileA
LoadResource
FindResourceA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

wsprintfA

msvcrt

memset
??2@YAPAXI@Z
strlen
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter

Sections

.text
Size: 4KB - Virtual size: 940B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ