129239401ce42bdf3e6cda07bffe78b0_JaffaCakes118 | Triage

Sharing

General

Target

129239401ce42bdf3e6cda07bffe78b0_JaffaCakes118
Size

24KB
MD5

129239401ce42bdf3e6cda07bffe78b0
SHA1

5215b8c54a898c37299dccc2775bcc36a0541e84
SHA256

1094b466d58935b36148b2d092cf6310423ebd7bedae75cb3161f01494aeab8a
SHA512

fd72324e2b8286824f9983e0055aeba107d9334b74c8c978400f4ca545d4dffc7a7a9bfc12014230356f157d862e271bc7bf7c0e4b770e358d53189f488aa88b
SSDEEP

384:f4xd/6FZ0yBMiNqIwy7+/8GqY/jte9cKkC5QeALUvco1hXprzM4BFa:f4r6ccPNa99/BwdkC5QcUetpBF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
129239401ce42bdf3e6cda07bffe78b0_JaffaCakes118

Files

129239401ce42bdf3e6cda07bffe78b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7a01c71edc3f428af7f232e1f01b637

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
SetFilePointer
MoveFileExA
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
Sleep
CreateProcessA
ReadFile
GetSystemDirectoryA
lstrcatA
GetShortPathNameA
CreateDirectoryA
GetStartupInfoA
FindFirstFileA
GetLastError
lstrcmpiA
GetProcAddress
GetTempFileNameA
LoadLibraryA
GetModuleFileNameA
CreateMutexA
CloseHandle
GetFileInformationByHandle
GetTempPathA
DeleteFileA

user32

wsprintfA

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE