aa7788748918e73cd52105af3e48b9b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa7788748918e73cd52105af3e48b9b3_JaffaCakes118
Size

51KB
MD5

aa7788748918e73cd52105af3e48b9b3
SHA1

dfc0eb21d614bf13658f68c3304fab6a33e6d366
SHA256

f701af30a3d98015edcfc2964d1d8dafbdbc8361c462e1fdc316099e928f7ab0
SHA512

e0032a6ccd8568e27dc1ffa16721ab8cb8c29e84124a8013052aec37de32c33932b8052e19de43d31886b7006e7caf3053224d5ae1ba8bcba84402954aa047db
SSDEEP

768:VJ56aqHu5IcMgqHH5hMPlJXUsJwWWmOz4od4SDoNWOwjy7:P0BHuWcMn5ONJXUsWBd4SoYD2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa7788748918e73cd52105af3e48b9b3_JaffaCakes118

Files

aa7788748918e73cd52105af3e48b9b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE