a755b7855eb3db68c832a2af392c7676_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a755b7855eb3db68c832a2af392c7676_JaffaCakes118
Size

2.7MB
MD5

a755b7855eb3db68c832a2af392c7676
SHA1

69f0648a95d35322b99ff11b74bc25f73a03b851
SHA256

f3a4067b935459fee4c8378b7389d77d6651e12a85648cb733ef6b92a74c847d
SHA512

a9e12ab72388b20570f6bcdea6e6fb8dd3d2e1505666881b255de538b43b467802d0a9c1e0d6294af4e6376f9fceaebf01a296b5478d3c44d51dfcd01f4ba4ee
SSDEEP

49152:G2JeER6cj6THNb+B+NHL18QST2l9E1uQMPTHNnnVsj8HdMMO:/B682NiO18L2CuQcH9u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a755b7855eb3db68c832a2af392c7676_JaffaCakes118

Files

a755b7855eb3db68c832a2af392c7676_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8c7848676b64a85c7516fa480fe9eb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDoubleClickTime

shell32

SHGetSpecialFolderPathA
ShellExecuteA

shlwapi

StrStrA
StrChrIA

kernel32

GetCurrentDirectoryA
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
RtlZeroMemory
LockResource
LoadResource
CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindResourceA
GetTickCount
GetModuleHandleA

urlmon

IsValidURL
CoInternetCompareUrl

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 770B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE