55dcd6e33b417e63f06de688fcbcd849_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55dcd6e33b417e63f06de688fcbcd849_JaffaCakes118
Size

37KB
MD5

55dcd6e33b417e63f06de688fcbcd849
SHA1

d34dd36418f68345a58d46b7f9a28398a6e5c726
SHA256

ca2baee92d1f5887499e28d4bd4dc0217670e5954d1d356d4494ec714ddd46be
SHA512

5d1dc9c7bcd1e5077b3b387e36aa4737fc15d1c837c4bff0d1cdaaf6571cf9c330f8742e261db331bc64f88540a3a6575d8a3dd5e9dbf1d626e4fe44303a6dae
SSDEEP

768:6ev3F2M/mB6RPJELnSuWy2wM9nY+TqZFPAkjVCZ+6kmiSi56rKi:Rv3FdjNOGRyTcY6rKi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55dcd6e33b417e63f06de688fcbcd849_JaffaCakes118

Files

55dcd6e33b417e63f06de688fcbcd849_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2cdf7b2aa4fd4c550fd2857eb415480

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
lstrcatA
LoadLibraryA
GetProcAddress
LocalFileTimeToFileTime
FreeLibrary
ExitProcess
GetModuleHandleA
GetSystemDirectoryA
SetFileTime

shell32

ShellExecuteA

msvcrt

??2@YAPAXI@Z

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ