25c35720df5c8e53be7fff1516e68069_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25c35720df5c8e53be7fff1516e68069_JaffaCakes118
Size

133KB
MD5

25c35720df5c8e53be7fff1516e68069
SHA1

666c4a53215fb18e8333e278581154d87076223c
SHA256

01be7fca10625f956d8af04b37ba9d5fb7d3be58024a3442b254375f84ecee6e
SHA512

782ad804c9450ec605be6101723264265049e6d9c94484c11d7daf688f7469a6dc49f837653b86430aee82d2c3fb04ada920abf35b3cf33ba0d76eb2793a5513
SSDEEP

3072:sOQKesfQv2IrnMh/hoLPqYXxdl9SihANb1/wsgmqaQWatIJ3Ou2U:sO9fQBrMHLYXxdl9Zhu/wBrf82

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25c35720df5c8e53be7fff1516e68069_JaffaCakes118

Files

25c35720df5c8e53be7fff1516e68069_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ad416b3d6f44bc545636f7c6efa9695

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileA
LockResource
GetCurrentProcess
FindClose
MapViewOfFile
SetEndOfFile
SizeofResource
SetFilePointer
GetSystemInfo
VirtualQueryEx
EnumResourceNamesW
FindFirstFileA
UnmapViewOfFile
FindResourceW
ExitProcess
GetFileAttributesA
CreateFileA
ReadFile
CreateFileMappingW
GetModuleFileNameA
GetTempPathA
LockResource
CloseHandle

shell32

SHGetSpecialFolderPathW
ShellExecuteExW

occache

FindControlClose

ole32

StgOpenStorage
CoUninitialize
CoCreateInstance
CoFileTimeNow
CoInitialize

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 1024B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ