d661dc2ad44bd056f7ca292727007693_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d661dc2ad44bd056f7ca292727007693_JaffaCakes118
Size

140KB
MD5

d661dc2ad44bd056f7ca292727007693
SHA1

824a392b1c699db6a67463f797a811cc07e310f9
SHA256

27a7768c45cf418b5aa057c0721e5599869390ba2e794b7bd03aa6fadff9d87c
SHA512

52cb3dedb984fdb2f72474bf4a7e6ad2110164e4b4df32dc7397531bdf95a2e6de6f9f7301e370af72b5bfcd1a1af35b6259177193f99c62cf289b51cf008c6f
SSDEEP

1536:g++NJAPod8leLLLLLLLLLLLLL4YbTBxupuHG6+/efOtNLLLLLLLLLfKotE8Bq4tR:n+NJA0JxOuHx+/efOrKo3876NCf/Xey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d661dc2ad44bd056f7ca292727007693_JaffaCakes118

Files

d661dc2ad44bd056f7ca292727007693_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e4510e7fce429b13a61eb2314890283e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetLastError
CreateDirectoryA
CreateProcessA
MoveFileA
DeleteFileA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
WaitForSingleObject
CreateMutexA
GetModuleHandleA
GetStartupInfoA

msvcrt

_initterm
??2@YAPAXI@Z
__CxxFrameHandler
strstr
_vsnprintf
_beginthread
_exit
_XcptFilter
exit
_acmdln
__getmainargs
??3@YAXPAX@Z
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ