0698d7000e2c49a9b4ec67cdd0c844f0_JaffaCakes118 | Triage

Sharing

General

Target

0698d7000e2c49a9b4ec67cdd0c844f0_JaffaCakes118
Size

41KB
MD5

0698d7000e2c49a9b4ec67cdd0c844f0
SHA1

e1a70ab1ce48065111d77cb7464d9cf2b116c221
SHA256

24682878867e7346961b6dd8b21c332ac579b0fa33d283101d6d335ff97dcc04
SHA512

6fbd5ab9311af714ddca953279fbd75d27d24de47c9bff165b027ed9a4c7358c8107815c53e452a2d3eda34065d67abe072c72a192dbfad038a4427dbc590faa
SSDEEP

768:Kn50EUbw0GW76GrRnJxaPXOzjiDe3OmBFfuV3t19:Kn50EUbwxWGmLxavyiDeeo+tP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0698d7000e2c49a9b4ec67cdd0c844f0_JaffaCakes118

Files

0698d7000e2c49a9b4ec67cdd0c844f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f39384ca594c12fd98360926c22fbddd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
DeleteFileW
SetThreadPriority
VirtualProtectEx
GetModuleHandleA
lstrcpynA
lstrcpynA
CreateDirectoryW
FormatMessageW
ReadConsoleA
VirtualFree
GetFileSize
GetPrivateProfileIntA
GetCurrentThreadId
lstrcpynA
GetDiskFreeSpaceW
GetFileType
ReadFile
lstrcmpA
lstrcpynA
GetCommandLineW
GetCurrentDirectoryA
lstrcatA
lstrcpynA
lstrcpynA
OpenMutexW

certcli

CAEnumFirstCA
CADeleteCertType
CAEnumNextCA
CAFindByCertType

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ