dcc24a15340a7c4cbda2676cd50168fa_JaffaCakes118 | Triage

Sharing

General

Target

dcc24a15340a7c4cbda2676cd50168fa_JaffaCakes118
Size

379KB
MD5

dcc24a15340a7c4cbda2676cd50168fa
SHA1

b3119eadebf4a2561bad74a030969b4dc64eec2a
SHA256

0007af3d8db5e63bd6c2e92b7b2a39472d17aefde294ab91ff34c51de0267985
SHA512

75a73818810d5deab5ca063cdf521de3ee4ac171807213581af068ba6fd74336e345ecc0b0c93c9b18ff4b0034ff14e9b7d685025ce8b91c1c9c13b605499364
SSDEEP

6144:3Y8O1yaV8rGTofjWPcQpezKeC1U99fgcu8C/ap/FM62jIsOx:3YB1CrUo7WPcCeWr1UJu8PS/Ms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcc24a15340a7c4cbda2676cd50168fa_JaffaCakes118

Files

dcc24a15340a7c4cbda2676cd50168fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e8c03edf7de3e2230621f798163370a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetLocalTime
LoadLibraryA
GetProcAddress
lstrcatA
CreateFileA
CloseHandle

msvcrt

memcpy

Sections

.text
Size: 377KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ