c9740ea5bdfa4e0aa6f1054ee04c56dc_JaffaCakes118 | Triage

Sharing

General

Target

c9740ea5bdfa4e0aa6f1054ee04c56dc_JaffaCakes118
Size

291KB
MD5

c9740ea5bdfa4e0aa6f1054ee04c56dc
SHA1

2678bc8df5f07656b2c1478647ee1aa222f44542
SHA256

0fe5705dc7d0520be39cdb7bc1432fbb3c3a668574356f4c5448424cd3f8e101
SHA512

f8e53bf746b510012c683f4b9488ab0bcc5f526b113e08e6dffcca5cff2afd2a98f40782eb7decbd683a4f1a54a714ca180b04a14fd8fc1a59233fc236b2d53f
SSDEEP

6144:RFzFNj+UWnJEK7X52+7+nj4Z7k1u8nQ9sB0nCQyO:jzFNj+VnOUJ8KyPnQq0CM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9740ea5bdfa4e0aa6f1054ee04c56dc_JaffaCakes118

Files

c9740ea5bdfa4e0aa6f1054ee04c56dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

750bd2bf1e6344af28b56183714695f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
CreateFileA
lstrcatA
CloseHandle

msvcrt

memcpy

Sections

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ