a8c9cf88dde2e7ae3d4415f615711dd1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8c9cf88dde2e7ae3d4415f615711dd1_JaffaCakes118
Size

292KB
MD5

a8c9cf88dde2e7ae3d4415f615711dd1
SHA1

08ac7d17061eed28c3203cbf87a161331171847b
SHA256

dec8f411e5ebcc55f7d7a421358ec919e83ed89f4e893c87fa7255d0aae21fac
SHA512

f21a0b27d5d4b311671e36ce4a3276c83378d600fd3a70d17e376bf2faed6cacf654e1598216cee26780e0d020c85aab2dd901acc127ac7b8016374e19b52af8
SSDEEP

6144:tMAz9fL9/GoBtUlB6M12LUchvB/SWB/EhIzou:tMs9fRtW2LT76Kou

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8c9cf88dde2e7ae3d4415f615711dd1_JaffaCakes118

Files

a8c9cf88dde2e7ae3d4415f615711dd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68777fb9ac6ba36cb07513c6f9f7ab7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
CreateFileA
lstrcatA
CloseHandle

msvcrt

memcpy

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rtext
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ