0740f4d61893f6a72f8ea11af4c52d30_JaffaCakes118 | Triage

Sharing

General

Target

0740f4d61893f6a72f8ea11af4c52d30_JaffaCakes118
Size

122KB
MD5

0740f4d61893f6a72f8ea11af4c52d30
SHA1

ded1ae7ab67d459b730d207ae6e217c44b42201d
SHA256

2b970fe7221cc64e585dbdc4db41008b500a2aa6b59b7ff5e762932c71ee6d69
SHA512

ee76e07b008027044d07947f1e9efe6a1173367da15bb3a20597370b27b0c70715bffd5ee8df0b3dac446ffbf44db1c617810ac516d8c9f998648e4b5420f6a0
SSDEEP

1536:gL263ywh0ZsCw/k2ipzcQnpg5/1rVb+NHVXsrZXGtE28SHdW+DSkCLaKHCBsz9jB:tIB3pz8eOq9O8S9W+oYq8O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0740f4d61893f6a72f8ea11af4c52d30_JaffaCakes118

Files

0740f4d61893f6a72f8ea11af4c52d30_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c9caebf27cfc73097a998f59a77e048b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFileEx
GetDiskFreeSpaceW
CreateDirectoryA
LoadLibraryA
Sleep
lstrcpyW
GetFileAttributesA
ExitProcess
InterlockedIncrement
GetLongPathNameA
InterlockedDecrement
VirtualAllocEx
GetPrivateProfileIntA
GetExitCodeProcess
Sleep
Sleep
lstrcmpA
GetDiskFreeSpaceW
GetPrivateProfileSectionA
GetPrivateProfileIntA
SetEnvironmentVariableA
FindResourceW
WaitForSingleObject

apphelp

SdbCreateMsiTransformFile
ApphelpCheckIME
AllowPermLayer
ApphelpCheckExe

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rss
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ