b3865c2e795a712d44a6dee1ecf95fb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3865c2e795a712d44a6dee1ecf95fb0_JaffaCakes118
Size

201KB
MD5

b3865c2e795a712d44a6dee1ecf95fb0
SHA1

ef5edc7bfe3877766e1f230a8d74836b53f645fa
SHA256

b9866fc6c5e8ed9b7c1d0d5943cb05b4500b7bca32141a7a406ae76f22d52adc
SHA512

baaf900c66f77a55a60be11b7ec4d7968a2ce0046fafba00948c015c706ca443f6a77ceb9d280aa66e15d12dc194b0d31522f8d5de7a735273bee204fc44026f
SSDEEP

6144:y5c7G22OxGaXeGFdQTfhh6cNyJbs6V5JXDbOv:qNto5JTbOv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3865c2e795a712d44a6dee1ecf95fb0_JaffaCakes118

Files

b3865c2e795a712d44a6dee1ecf95fb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 14KB - Virtual size:

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE