d540d14fab82be5fdade19330ab0db4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d540d14fab82be5fdade19330ab0db4b_JaffaCakes118
Size

153KB
MD5

d540d14fab82be5fdade19330ab0db4b
SHA1

52caf6ac07ad9dc34fa0343f223bf6d46b6a5c4f
SHA256

270d539086c96d652c6b7b0875a990301834d78a042daa0e5e883c238e2d973a
SHA512

b39c36f101376c5d4bfdf38aa10aa0f8cc41099c4be7a308e6c4dfc9646aa4b82b04ea4144e1669163e9be177326089746ecad829458b89801a45e00ebb58fa4
SSDEEP

3072:o78mWOfiNqAWOfNNosvDdNGAJXE5/5vk9CllOVjN64D:oomWOfiNqAWOfEsvZNGAFE5/5MAzOFD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d540d14fab82be5fdade19330ab0db4b_JaffaCakes118

Files

d540d14fab82be5fdade19330ab0db4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE