d6660e6e89baf4cd6d941e175f922ded_JaffaCakes118 | Triage

Sharing

General

Target

d6660e6e89baf4cd6d941e175f922ded_JaffaCakes118
Size

9.0MB
MD5

d6660e6e89baf4cd6d941e175f922ded
SHA1

8f6bdf15116430f0e8e21ca45f53b754123cffaa
SHA256

577a902f8b8c7d0c261c963f646831ff32b22c7443905e780207370943006836
SHA512

e2de27614b55e0022a0b6093129e82b9d9878f43a373c14afa7111fb7cd663e4c8ed7a3a76ef8204d40b8493d525cd40b28235fb1c4d13367308926f7d807335
SSDEEP

49152:Izrh20HcSyFeOJpl6IKxrrQwgTz4HhsH+oYTRayy2LFxK5e6JZp2c+xoj2Sj3:0rh2RTSfQwNHhluyra2U3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6660e6e89baf4cd6d941e175f922ded_JaffaCakes118

Files

d6660e6e89baf4cd6d941e175f922ded_JaffaCakes118
.exe windows:4 windows x86 arch:x86

139e7a7ccf65dd44c8dcd484e83388cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA
ShellExecuteA

shlwapi

StrStrA
StrChrIA

kernel32

GetCurrentDirectoryA
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
RtlZeroMemory
LockResource
CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindResourceA
LoadResource
GetModuleHandleA
GetTickCount

urlmon

IsValidURL

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9.0MB - Virtual size: 9.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE