432a1c6b89c9a8c5f20665822fb9c2c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

432a1c6b89c9a8c5f20665822fb9c2c2_JaffaCakes118
Size

38KB
MD5

432a1c6b89c9a8c5f20665822fb9c2c2
SHA1

c2f19d4b9b777b6a1e93c0e9702a3a5cd5c54f25
SHA256

eecb3011bee0c47b63efb42027cfdf82e234f5beeaa69957790599af63af1e9d
SHA512

520ae58b3daf8c8d8a37eca3023e97a542796bea9b4039612b44207793ac0ccfd6bfc451a15ca6d99b5553f67113f1ef8529be270db5660a1dd0d3c5e6766747
SSDEEP

768:lTC3p0kAhanNElT8Ng1OKJV+edpVr4XihQeq3VqdLgNguk:hEnOn1N9F8XsQl0t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
432a1c6b89c9a8c5f20665822fb9c2c2_JaffaCakes118

Files

432a1c6b89c9a8c5f20665822fb9c2c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68d5feba4a54e70140aed3ee694e1f1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
CreateFileA
WriteFile
CloseHandle
GetTempPathA
GetTickCount
lstrlenA
GetVersion
GetModuleFileNameA
GetWindowsDirectoryA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetCurrentProcessId
ExitProcess
GetCurrentThreadId

user32

wsprintfA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE