fa5dc3afeabb789aaae2c41b80d8f0a2_JaffaCakes118 | Triage

Sharing

General

Target

fa5dc3afeabb789aaae2c41b80d8f0a2_JaffaCakes118
Size

12KB
MD5

fa5dc3afeabb789aaae2c41b80d8f0a2
SHA1

d2fe7d186e3447e1498c82d6652414f1e11a2d47
SHA256

0c19e099f5690833bb1053d62e306f8c978f5a5a132b1116f3ae9d3aad50b6e0
SHA512

08c2c6082843274904c231eaa784c7c69d298193b3f0bd45d06d41d6c46e3c58a64484206bd134ef7769b043e2fe888a15680a55a7f2108961c66bb7a9d92a9f
SSDEEP

192:9nq9u1qETqI8MdL/qRdoNsPeNNnkA0ObjjZbcTx6Cq8P6UaDIFRM0uyWu:9qxEWCNsPeNNnkrA9bczP6UaDIFRHku

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa5dc3afeabb789aaae2c41b80d8f0a2_JaffaCakes118

Files

fa5dc3afeabb789aaae2c41b80d8f0a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee4a85a24a78b96f1f446cb4f1944dde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetTickCount
SetLastError
GetProcAddress

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ