f575e8a0b6b11aa692d21ea710e8bd15_JaffaCakes118 | Triage

Sharing

General

Target

f575e8a0b6b11aa692d21ea710e8bd15_JaffaCakes118
Size

35KB
MD5

f575e8a0b6b11aa692d21ea710e8bd15
SHA1

a8d1d1f7bd875cef8199d7cd9da5a027e304218e
SHA256

02bf425a9e8207e4fc845ad8d2ee99c444f1e8a85dbca6f0a51e5b8cc26ad3b6
SHA512

6979f50a78c0c51313d07bf8948bcff44cb2747c954a7397f16c08b858398b520a246835e1d58c305755d92a3dae09780605b1793909d4b2cee692f9b82e10fb
SSDEEP

768:ldxhhkGgd7gLa1/WMyv25LR2WCYCvMLcJn4CmIymmBta75z:lrhpgaLak+2lvMCXmzmUc75

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f575e8a0b6b11aa692d21ea710e8bd15_JaffaCakes118

Files

f575e8a0b6b11aa692d21ea710e8bd15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8be6a879f52e3cb7863c45e683e83b2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
CreateFileA
CreateProcessA
CreateRemoteThread
ExitProcess
FindResourceA
GetCommandLineA
GetCurrentProcessId
GetFileSize
GetModuleFileNameA
FindFirstFileA
GetProcAddress
LoadLibraryA
LoadResource
LockResource
ReadFile
SizeofResource
VirtualAlloc
VirtualFree
WriteFile
WriteProcessMemory

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ