f46d78b8479b9a6725033ef735592f29_JaffaCakes118 | Triage

Sharing

General

Target

f46d78b8479b9a6725033ef735592f29_JaffaCakes118
Size

41KB
MD5

f46d78b8479b9a6725033ef735592f29
SHA1

eb3f8e5b69b10b69981eb393196e271647915e09
SHA256

e62afa50e544b603860a2c27a9b9acd68406f2166d70c0ec8f5a0444a3fcb068
SHA512

ae0bd8d90d11230457431e967f1fb24a60db9e61794ed3783783f95cb76a4e8877be54e522eb40331cae214ff7425d64b5609e40fb1a141f384ad79175b6fd2e
SSDEEP

768:WpPNrGptLp1p2pZpnpaply9yo/cpI1gkuebVSzO9uf9shtN:+PVOtFX+zp6lg/caluebV+OYY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f46d78b8479b9a6725033ef735592f29_JaffaCakes118

Files

f46d78b8479b9a6725033ef735592f29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85bd25830e058a5bd184f05354ac44a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetLastError
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryExA
VirtualAlloc
VirtualFree
lstrcatA

shell32

SHGetFolderPathA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE