ed6d6b1e03ca2617a3191d468295a26d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed6d6b1e03ca2617a3191d468295a26d_JaffaCakes118
Size

12KB
MD5

ed6d6b1e03ca2617a3191d468295a26d
SHA1

fa1a53d033852f6a62bf093deb64923eb437a0f6
SHA256

9fe593a0dff0ab3487ddab8cc5606496f4f98db80edc73636e924c66253b352a
SHA512

c4c401f8d2ae3fa2ccfe43950a86df4d5788e46f717d69df8c29606c08ce80813ae5534c33f1aafd321cf5853957462c8ebed0c0fa4e8a32a0eac7af65e81445
SSDEEP

192:cAy+o7sMwgD9YvNsPeNNnkjjsK0seahaHoiFVvJjzJbwp:c5+ogEaNsPeNNnkjjCseah6FVRRwp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed6d6b1e03ca2617a3191d468295a26d_JaffaCakes118

Files

ed6d6b1e03ca2617a3191d468295a26d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee4a85a24a78b96f1f446cb4f1944dde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetTickCount
SetLastError
GetProcAddress

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ