dd428c37e48a7082420b97d6de5ac00f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd428c37e48a7082420b97d6de5ac00f_JaffaCakes118
Size

9KB
MD5

dd428c37e48a7082420b97d6de5ac00f
SHA1

66f3dfb33d9a2ee766d45973a05d25eb7a593f66
SHA256

9b4d857aad79845058668cef5f726a1d41a9cbb0038020f495c91be1ee813b6d
SHA512

aa969692f79389c2f6e212581042366f5eeee3a9a01842e0bff399d6093184985ee68acd2597bdd078570b1ea7bbb6a1eda7faf7d6b63e7425a86a9c872b1b51
SSDEEP

96:SrLnD6vAnohJHyV7nS62sQC4o4fOYyTSzm9izZp43Z9ND9WaY+tw:SrTD6onobHyV7SM4o4feeEEZpaHD20w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd428c37e48a7082420b97d6de5ac00f_JaffaCakes118

Files

dd428c37e48a7082420b97d6de5ac00f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66b18ad74eb7db9d498d7ab6c08faba7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
LockResource
LoadResource
FindResourceA
GetTempPathA
CloseHandle
DuplicateHandle
GetCurrentProcess
SetStdHandle
CreatePipe
GetStdHandle
GetModuleHandleA
GetCommandLineA

user32

LoadStringA
wsprintfA

shlwapi

StrToIntA

msvcrt

strcat
strlen
malloc
_strlwr
strcpy
strcmp

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ