aa0b420de580247f7d479483be6452f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa0b420de580247f7d479483be6452f1_JaffaCakes118
Size

955KB
MD5

aa0b420de580247f7d479483be6452f1
SHA1

086f241b5ae316a61feca502278dc44708648d47
SHA256

82c297be3f03443ad55f44d5ef288138ef95812522a769d615e113f75b293d56
SHA512

5e78eedaeabfeb2fa50ffd630b481e59dc1666a92f4d9e4905350e1a1afecf94bb2c86f4827d0321669e9c3f8f47de957a87507e5f4a541a0de7a7958b0e36e2
SSDEEP

12288:ExtCt2xCUyZtwAvAs4wTCyrPT0yq0VezaOvoJ:1t+ty/wAvN7lry0VeH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa0b420de580247f7d479483be6452f1_JaffaCakes118

Files

aa0b420de580247f7d479483be6452f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3868ac2a42343b32bb4a511e7a33cb57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceA
lstrcpyA
lstrcatA
GetSystemDirectoryA
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
VirtualFreeEx
GetExitCodeProcess
OpenProcess
GetProcAddress
LoadLibraryA
lstrcmpiA
GetWindowsDirectoryA
GetLastError
CreateMutexA
GetStringTypeA
RtlUnwind
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW

user32

wsprintfA

Sections

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ