01dc7338a716632b8f60e8bbd493b4ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01dc7338a716632b8f60e8bbd493b4ee_JaffaCakes118
Size

23KB
MD5

01dc7338a716632b8f60e8bbd493b4ee
SHA1

7cb1ca8a76ca3e7a046f88871d3f3e39b4976d6a
SHA256

ddd9c0bf229588232020ac75591eec826d099990861d72239300e59a2de5ef0a
SHA512

e41dd889769bee6f805f5ea0d6bd724bd24b88739b8ae047c81a0cd8e24aaebb0158d8ee4131c76350cc4cfd5e25d22d6ae230eed0cd23c8f4faa5c36b6a5ebb
SSDEEP

384:45ThdCgNhJCsO1RbvjFBuA+VzVvx38YE8vAPVuZ7SNfohTgkNlfxNAJM4BF:Eh/IPDPb56zVZMjEAPgBSNfkN1OBF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01dc7338a716632b8f60e8bbd493b4ee_JaffaCakes118

Files

01dc7338a716632b8f60e8bbd493b4ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7a01c71edc3f428af7f232e1f01b637

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
SetFilePointer
MoveFileExA
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
Sleep
CreateProcessA
ReadFile
GetSystemDirectoryA
lstrcatA
GetShortPathNameA
CreateDirectoryA
GetStartupInfoA
FindFirstFileA
GetLastError
lstrcmpiA
GetProcAddress
GetTempFileNameA
LoadLibraryA
GetModuleFileNameA
CreateMutexA
CloseHandle
GetFileInformationByHandle
GetTempPathA
DeleteFileA

user32

wsprintfA

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE