e91b6d9bd604024d1b63149957f873ee_JaffaCakes118 | Triage

Sharing

General

Target

e91b6d9bd604024d1b63149957f873ee_JaffaCakes118
Size

52KB
MD5

e91b6d9bd604024d1b63149957f873ee
SHA1

b09928af94aedee4edf32f6afc427c7e7ff88841
SHA256

cc20af452f633b393c01229ef072cd51d91cf81c46b94e3b932155ca6e7e0d05
SHA512

184c593a0426b73e45d963e1ea8670e6ae32cc99c60e15c9404530864edd5bf7589a30ba84037f20b4fd7b3308a4448a13bb3b389a90c5e267ffea8138a3faaa
SSDEEP

768:c5wt59uxWdYpQ38YIFwOXQg5J2HMD/ihzRDtT9UxrcTWArP:FtqDX5gH4OJT4ATzP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e91b6d9bd604024d1b63149957f873ee_JaffaCakes118

Files

e91b6d9bd604024d1b63149957f873ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb9d1bda20b1543906f3a94f7b1cd492

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetSpecialFolderPathA

kernel32

CreateFileA
lstrcpyA
lstrcatA
WriteFile
SizeofResource
SetFileTime
LockResource
LoadResource
GetModuleHandleA
GetModuleFileNameA
FindResourceA
ExitProcess
CloseHandle

Sections

.text
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE