ce464fb766cb9812ffbe59962d667f25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce464fb766cb9812ffbe59962d667f25_JaffaCakes118
Size

955KB
MD5

ce464fb766cb9812ffbe59962d667f25
SHA1

11263d071059903c7a55b354d050ba3afd6d271f
SHA256

f22ef873932ba76efe6f7003467af7f15ab1329921b48b234bf8e046852d384a
SHA512

2e7bc5001bbf53b8fc91ac2b5d5ac88a4ff5eb532f910f13e2cecdf5ad77518b1cb8c7985afea7b66849aa8ec620f56e5731b307a3e50a3445aabce57487c458
SSDEEP

12288:ExtCt2KDelgGGnVAAtZMC12BXnh6ya+sNzaOvoJpaz/g/J/vVQT:1tNKlX8VAAtZp43u+sNH8az/g/J/NQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce464fb766cb9812ffbe59962d667f25_JaffaCakes118

Files

ce464fb766cb9812ffbe59962d667f25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3868ac2a42343b32bb4a511e7a33cb57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceA
lstrcpyA
lstrcatA
GetSystemDirectoryA
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
VirtualFreeEx
GetExitCodeProcess
OpenProcess
GetProcAddress
LoadLibraryA
lstrcmpiA
GetWindowsDirectoryA
GetLastError
CreateMutexA
GetStringTypeA
RtlUnwind
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW

user32

wsprintfA

Sections

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ