ce4089724c9cffb296b407678cf938df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce4089724c9cffb296b407678cf938df_JaffaCakes118
Size

33KB
MD5

ce4089724c9cffb296b407678cf938df
SHA1

128185866c60f70ae74e8ef315fb1c31581920ca
SHA256

5e690000e4726e13a979a79d2753482bcc63a803583158b428baf3cac9bd8048
SHA512

c76cc6424148773bccccb7731c4451ef017b4f2de263508a1d2b8271650ca3d0035efc8471ead2775322f99026de09256d32262c71851210d0552f8b25415e81
SSDEEP

96:jsCVbbkd2/jeUx8rxTwo78LbSPpPrwK/YPJXk3ec:wCVsE/jordwUwAPFKk3h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce4089724c9cffb296b407678cf938df_JaffaCakes118

Files

ce4089724c9cffb296b407678cf938df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4b4c5bbfacb86f1c6e94b0c00ce9b7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetEnvironmentVariableA
GetFileSize
GetLogicalDrives
GetModuleFileNameA
GlobalAlloc
GlobalFree
MoveFileExA
ReadFile
SetEndOfFile
SetErrorMode
SetFileAttributesA
SetFilePointer
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrcpynA
lstrlenA

shell32

ShellExecuteA

shlwapi

PathMatchSpecA
PathFindFileNameA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ