b2f445f3319e628b10541ab9d59bc674_JaffaCakes118 | Triage

Sharing

General

Target

b2f445f3319e628b10541ab9d59bc674_JaffaCakes118
Size

131KB
MD5

b2f445f3319e628b10541ab9d59bc674
SHA1

d027cd8eda78f625ac5031109f655f60eed641e2
SHA256

72ef83e91e2ae0b2ea773f47d479f8690cbd755a0e53262bf110b1cbd2186dfd
SHA512

8d284fbc6308b497acea6906b42286bd78a57d6ae8880fa438aebf45e153987a34732a6a55765116ac7970b1aef8ee9620b11cc92f91e8708ba4b261b27d1032
SSDEEP

3072:4Ij1p/Nmr6Kgev/H4GrhAhqxArAr9RIjLK260jB20XiPFjutmx4uTrfIwwPRDWrZ:4w/NuxtHIvct0SPMQ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2f445f3319e628b10541ab9d59bc674_JaffaCakes118

Files

b2f445f3319e628b10541ab9d59bc674_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acee2d9a3340fd5e00e1df2d140fa05c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryW
ExitProcess
SizeofResource
LockResource
LoadResource
FindResourceW
MoveFileA
GetSystemDirectoryA
GetModuleFileNameA
Sleep
GetFileAttributesW
CloseHandle
ReleaseMutex
GetLastError
LoadLibraryA
GetModuleHandleW
CreateFileA
GetSystemDirectoryW
lstrcatW
lstrlenW
GetTickCount
FreeResource
lstrlenA
WriteFile
CreateFileW
GlobalFree
Process32NextW
lstrcmpiW
Process32FirstW
CreateToolhelp32Snapshot
GlobalAlloc
GetModuleHandleA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary

msvcrt

fopen
fwrite
strchr
strstr
memset
_except_handler3
memcpy
realloc
malloc
strlen
??2@YAPAXI@Z
fclose

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ