d2c7480ea16cd27056aad385c1d5b5c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2c7480ea16cd27056aad385c1d5b5c7_JaffaCakes118
Size

37KB
MD5

d2c7480ea16cd27056aad385c1d5b5c7
SHA1

a3fa82bb42d29eceee526cff133fbfd5e225d603
SHA256

bce0ece60901af9c5142969546bf4cfc97ac8234dc2cd9f752e754d4ac0e9dc5
SHA512

7025c0c33db7789ab7568773f0da8ccd62b455cd494cb4f3cb34606ec8e6982e3420e5b2caf76dded0e83fbd0f9f79eb68d900c27e8c03879602b30e08e71547
SSDEEP

768:gvdLhmZ+bcaI+/tKyfo1YF3mrv68/LT71iRW24LthxsKnP:rXW/ttfisKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2c7480ea16cd27056aad385c1d5b5c7_JaffaCakes118

Files

d2c7480ea16cd27056aad385c1d5b5c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3f89a7f6c6cd2e7abd0ff3d34940ef5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
lstrcatA
OutputDebugStringA
LoadLibraryA
GetProcAddress
LocalFileTimeToFileTime
FreeLibrary
ExitProcess
GetModuleHandleA
GetSystemDirectoryA
SetFileTime

shell32

ShellExecuteA

msvcrt

??2@YAPAXI@Z

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ