ff481e6c75ab1a5e234cdde08bb193a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff481e6c75ab1a5e234cdde08bb193a0_JaffaCakes118
Size

292KB
MD5

ff481e6c75ab1a5e234cdde08bb193a0
SHA1

59e3556c47d68d6ec11dd5ff23b96b5daaadd6b4
SHA256

405839b8631a69f91f5240ccd041c7b9fb2df2d65729f3905cafa6d972f0e46c
SHA512

85eeeedfc8437c221d706b21916e37612c1fd015f11fe8c55b2d43a392df24bc8f9cf0aba1db667c42fa7b6354aeecd308c00eba7d1ec74e2ba46fd974436622
SSDEEP

6144:1MAz9fL9/GoBtUlB6M12LUchvB/SWB/EhIzoi:1Ms9fRtW2LT76Koi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff481e6c75ab1a5e234cdde08bb193a0_JaffaCakes118

Files

ff481e6c75ab1a5e234cdde08bb193a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68777fb9ac6ba36cb07513c6f9f7ab7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
CreateFileA
lstrcatA
CloseHandle

msvcrt

memcpy

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rtext
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ