f9f05e2335475a72213505b7d63a931a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9f05e2335475a72213505b7d63a931a_JaffaCakes118
Size

32KB
MD5

f9f05e2335475a72213505b7d63a931a
SHA1

b08ed18478b6f77b2ca34d22b40af60278431e23
SHA256

10a7b0610e0793635287f09d034b3bf0e66b65c5efa972fd8fb2dafc40c1c78e
SHA512

75d1292884494ac3295173612ac766b6050818ea8617e5c74a2611816bc12f040e7d30ecd952d1623e8e274d01f5517576144c46f79fd8e3b8b78d3382fc57ef
SSDEEP

384:tktgKDOeeTTswVm0it2HyLfiIOxUv77lfT9FFfYGEB7EWp3MP0RD95nQK5Rps:O6mFOyLtQsv4Eonh/s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9f05e2335475a72213505b7d63a931a_JaffaCakes118

Files

f9f05e2335475a72213505b7d63a931a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

033b4548ad1b07d15ca4999fabf75b1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
LockResource
RtlZeroMemory
SizeofResource
WriteFile
lstrcatA

Sections

.data
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 461B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ