c77d4c2c6d7bed0d2316edecf15ab0a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c77d4c2c6d7bed0d2316edecf15ab0a2_JaffaCakes118
Size

297KB
MD5

c77d4c2c6d7bed0d2316edecf15ab0a2
SHA1

148a662078d9c3d2450c5f98ac84cb862e0b6dc3
SHA256

0252fcf62511811e709a48595730b3f1b38948b50bc59922046c6f4ca6ce2db0
SHA512

49a43e652909fd1340d6088c46bcc8c4524380e52237a9c8ba4bab95b4b41a36530432a641046df4bd6666f115c6c37fdec27c5e4291731a0f32370db253b6a7
SSDEEP

3072:ppe7FPXpTomWqLEnCYvcvIXRTy1hmUI0xlOcwgIvS3oGcFuG9hFoHk148GzMwup0:PgXCvDx8hzNxl8gIvSiFxTO8GzMa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c77d4c2c6d7bed0d2316edecf15ab0a2_JaffaCakes118

Files

c77d4c2c6d7bed0d2316edecf15ab0a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8fcf57146ab824bb067bf2896f723f7e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateFileA
LoadLibraryA
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ