aac4324e9d24a70af6079c7aeb857fcc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aac4324e9d24a70af6079c7aeb857fcc_JaffaCakes118
Size

98KB
MD5

aac4324e9d24a70af6079c7aeb857fcc
SHA1

ae87033773f58f3ed8737edfc9af629e382dce52
SHA256

d17ddb369cb64fb91b1f4309a51a0598fc0bf30b8c73c1a861b5c40df74b7eab
SHA512

3daa9a4acbde83a0a6458197a9e5e892910d0c20a9d0e5d3f839d543646e6994a6521b8b3ef11c8a9f87e7ecd9f7053952643cc0fb9994f027577749a80258b5
SSDEEP

3072:w0VMoIKDj0c0CJBecUYzlzrMvHU+aPPAG:NBGdY5IDyx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aac4324e9d24a70af6079c7aeb857fcc_JaffaCakes118

Files

aac4324e9d24a70af6079c7aeb857fcc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d05fb31809428dfa6ee0a27d9c9ff8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
CreateHardLinkA
GetLastError
GetShortPathNameA
GetProcAddress
ExpandEnvironmentStringsA
LoadLibraryA

Sections

.text
Size: 78KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ

.itext
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE