d284b3957f48225279aff9111e3a90c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d284b3957f48225279aff9111e3a90c0_JaffaCakes118
Size

64KB
MD5

d284b3957f48225279aff9111e3a90c0
SHA1

ff2375cf5d2e74b2ec883b608637da5aca045dd9
SHA256

7fc5ccd084e152a130453ef138f8652de144f3089c9109baaa23f235d5d5b2de
SHA512

da4374977cab7a55a406b73bbbccdd4a78f335909794d69c72831f20ca2d79c0f26c96a32a43be5d098c60e0efe9ea76a88f69620be75b3d97b9effa1aa2fb8f
SSDEEP

768:ZTDTsJDIXF8xaY+8c9nrQlnKr5RPaLrcgiOgMJwQRj9p6rLEtp6IQ:1DTsqF8xjcQeP2cnOgo598rwt8H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d284b3957f48225279aff9111e3a90c0_JaffaCakes118

Files

d284b3957f48225279aff9111e3a90c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

32ca8d5fca836efa8536566f0eee05c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA

Sections

BitArts
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 1024B - Virtual size: 2KB

BitArts
Size: 32KB - Virtual size: 32KB

BitArts
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE