f7a2bbfc7a170223051ef86ad2fd2362_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7a2bbfc7a170223051ef86ad2fd2362_JaffaCakes118
Size

14KB
MD5

f7a2bbfc7a170223051ef86ad2fd2362
SHA1

7f7bd9f1377fe1f63329b3183f8458d85ce22957
SHA256

cdc2e272804f57daf42614514e7979bdb04dffee44697f31f9120e9cf8641812
SHA512

05404cf57b8479fa24b24939cf020ecc3370207886b870b689ac332a13dd67f07366b48e2b641746894f59a0906c2a9907ddf96169c98c9fbd75d2d30f86eb9f
SSDEEP

192:hLTQ/r9+cv6ic+xkV2DyDgMi9uL6ZZgOJP6ZN7Bs7GLkfsUEwEzAgHTKsJayM:hH+Zh6ic+xkkDhKIwk6LkUFTEmayM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7a2bbfc7a170223051ef86ad2fd2362_JaffaCakes118

Files

f7a2bbfc7a170223051ef86ad2fd2362_JaffaCakes118
.exe windows:4 windows x86 arch:x86

058dc95f89656af78e1cde9d00861259

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateProcessA
ExitProcess
GetEnvironmentVariableA
GetModuleFileNameA
GetShortPathNameA
GetThreadContext
ReadProcessMemory
ResumeThread
SetThreadContext
VirtualAllocEx
WriteProcessMemory
lstrcatA
lstrcpyA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE