e01ff343bf1beca225f79a0e5d07f5ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e01ff343bf1beca225f79a0e5d07f5ce_JaffaCakes118
Size

87KB
MD5

e01ff343bf1beca225f79a0e5d07f5ce
SHA1

93b254e276ecbd45716c057d9e6022618ae7d909
SHA256

b41a418c4aaa6aefb8cdbe054a5d3fdb4e97e8861ec6bd9050b833a9c81169e5
SHA512

744f35beb32463e80d48becae99c2a8a3785064052bb274b3ae68ab511ffba7150f68823479e40169b46eca33ed5e9e5592998e9bf9704cadf0b700e3ed123ef
SSDEEP

1536:r26tjtBKlNpD4Ez06OivhNxSCYcgU+8ZAC3Bdq8s1HLoV7AVlR03d:a1rpJoov05nEpstLcA3R03d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e01ff343bf1beca225f79a0e5d07f5ce_JaffaCakes118

Files

e01ff343bf1beca225f79a0e5d07f5ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a43bb400f8ab33d0f218c91fa01ec66b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA

lz32

LZCopy
LZOpenFileA
LZClose

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ