03362a070c8614a974e099604d9872a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03362a070c8614a974e099604d9872a1_JaffaCakes118
Size

18KB
MD5

03362a070c8614a974e099604d9872a1
SHA1

21f5bb34e702a68657c13d0f9f41858291ca4ef6
SHA256

9910148ca5a5274134a0e5318146f42b8a532a69f6a15301daabcd91bb20bd59
SHA512

8b702c6cdace7fd6f83858bf617ea522a298786ddaae4efea9207d51236baaaabe83e67fc47a79cda08fa2a76517ea56d3709c9b510390e0afb2ffb635f7aa80
SSDEEP

384:OXXxZifOP8h1HjCukYVXtJFOpuEMkhb2XAHQZSA63dP:OLmo8hrjL+puEnhSkQoP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03362a070c8614a974e099604d9872a1_JaffaCakes118

Files

03362a070c8614a974e099604d9872a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa53b6d4dafe218ae5d2cea469760c2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
CloseHandle
CreateFileA
ExitProcess
FindFirstFileA
FindResourceA
FreeLibrary
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetTempFileNameA
GetTempPathA
GetTickCount
HeapAlloc
HeapFree
LoadLibraryA
ReadFile
SetFileAttributesA
SizeofResource
WinExec
WriteFile

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ