044bc7483a98dce79a010d10f69f71d7_JaffaCakes118 | Triage

Sharing

General

Target

044bc7483a98dce79a010d10f69f71d7_JaffaCakes118
Size

950KB
MD5

044bc7483a98dce79a010d10f69f71d7
SHA1

f9ae2f773eb25a6ecb54c56130ba5f44416d9faf
SHA256

544bf95467f932f74d030d7ea56b4b210f9e19abce3e756f284b637503793b57
SHA512

e654e27f0358e9d871c0c001b17c7bda5f9ee5f880279c211b863a1c3b6fabd00b9fe938fdf240139777f41b92283fa21f2e5821f7b1bc78f4d953cd22de60be
SSDEEP

24576:Z8pBtTKZOWg51G7EX6NhKzvzvf5zDpIlR:ZetTlRaSzvzvBVID

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
044bc7483a98dce79a010d10f69f71d7_JaffaCakes118

Files

044bc7483a98dce79a010d10f69f71d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca285fd696f41fd689fcc30f49a4c098

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetTempPathA
LoadResource
LockResource
SizeofResource
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 947KB - Virtual size: 947KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ