2903003d80778d9ae15878f320443a37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2903003d80778d9ae15878f320443a37_JaffaCakes118
Size

113KB
MD5

2903003d80778d9ae15878f320443a37
SHA1

dc7e5a5ad63ed1d6df623f2a02d9e61df33a0809
SHA256

b8757e97957e8a459e5f14f553f195298edff47b5bfcd89b0e47d732739e696c
SHA512

ad6cd8dae45dcb531d9802f5035bf030cd51e40f57c09fc59675f5bff75329f0659a1855e8848d2bfde732b5a2e5db43a5a02d652aa26ef54128ac28e6bda062
SSDEEP

3072:0UrUx2MBPb9wHUqQktaQ9p0MCRkZD+z2aUd:LrxMB9wHRQi9pFck5R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2903003d80778d9ae15878f320443a37_JaffaCakes118

Files

2903003d80778d9ae15878f320443a37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8347d9a360f01229df71f0509ce223ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
ExitProcess
lstrcatA
lstrcpyA
RemoveDirectoryA
DeleteFileA
FreeLibrary
CloseHandle
GetProcAddress
LoadLibraryA
WriteFile
CreateFileA
GetModuleHandleA
lstrcmpA
GetFileAttributesA
lstrlenA
GetTempPathA
GetFileSize
GetLastError
CreateMutexA
GetModuleFileNameA
VirtualAlloc
VirtualFree

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gentee
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ