aa75ba4f9fac24e23261958b4e094f16_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa75ba4f9fac24e23261958b4e094f16_JaffaCakes118
Size

6KB
MD5

aa75ba4f9fac24e23261958b4e094f16
SHA1

b649c0ec2d9be661c7bc1e12156d65ce668b17f9
SHA256

14b6ca28897c2e45fc2187b55db9ad1d6e708f7378859767ffe5710df4124882
SHA512

ed635b4ce8726b311dc082c8d54040b2ed478c0f694220f96bc88a103836795f2d40524119b78ba456d4400a647f03fcbce417fa923db6c3cd3704db0754667a
SSDEEP

192:NPiByCqejrtdGxTr5XTIpxMXnnnnnnnQQswwJM0q:0yWHtdGx35jYyKdM1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa75ba4f9fac24e23261958b4e094f16_JaffaCakes118

Files

aa75ba4f9fac24e23261958b4e094f16_JaffaCakes118
.exe windows:1 windows x86 arch:x86

c074104dbd009f718bb76c4652595b4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
ExitProcess
ExitThread
FindClose
FindFirstFileA
FindNextFileA
GetDriveTypeA
GetFileSize
GetModuleFileNameA
GetProcAddress
GetVersion
LoadLibraryA
ReadFile
SetFileAttributesA
SetFilePointer
Sleep
VirtualProtect
WriteFile
lstrcmpiA
lstrlenA

Sections

.code
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 572B - Virtual size: 570B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ