d3a83adaa995bc43a7092d4b0a5cea68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3a83adaa995bc43a7092d4b0a5cea68_JaffaCakes118
Size

18KB
MD5

d3a83adaa995bc43a7092d4b0a5cea68
SHA1

ccb1c4c0690a5989f9d94fdf565b9e4a9dfb30c9
SHA256

eb5742f0d4356251b538486ff2d2c84903bcc648f12a59ca763f046ee51e48a9
SHA512

a4092df7a79daec40caa71662a8480e5b7f48ba608cad5a8207aa627b7721afdfbeb9fbe5d6c776ea94a84e8e36cb1edf48453a9deea167d3de55a5eb587549b
SSDEEP

192:byb3ibpvM0fIyACJiREJ0LZuAAc3UOG0MsyGIWba0BkbBUFcigvbb:byb6v9EZ3Ac3dGZGIWba0B8UFcXTb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3a83adaa995bc43a7092d4b0a5cea68_JaffaCakes118

Files

d3a83adaa995bc43a7092d4b0a5cea68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc9742e72cc14646d88ed522032f6613

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
lstrcatA
FreeConsole
GetCommandLineA
Sleep
DeleteFileA
ExitProcess
LoadLibraryA
CloseHandle
GetFileType
GetModuleHandleA
GetModuleFileNameA
lstrlenA
CreateFileA
WriteFile
RtlUnwind

advapi32

SetFileSecurityA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ