0b67a54c83678ec7f56c50a201103787_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b67a54c83678ec7f56c50a201103787_JaffaCakes118
Size

4.3MB
MD5

0b67a54c83678ec7f56c50a201103787
SHA1

51e8f1bc0fa529a560ba67bffc26a62b065f9786
SHA256

47f16ddf40cb1d75d16487137072c3346cd1d9ab47fc1b1b7f9a3ffb0702ebaf
SHA512

ac9cc47ee834d9435e553fbeba1e9c68108ee38c50dde9be46b3d354212862576330a4eaaae6eee64ee6b2fdf42ba9e4c2f7609715dad374657dcac40c80d4be
SSDEEP

98304:rfP29dRB7x0Hl/JbHPaCe2fqIoTdIAZJUO/SUrRPsvB:D2z7x0Hl/JbHSCvfqltKU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b67a54c83678ec7f56c50a201103787_JaffaCakes118

Files

0b67a54c83678ec7f56c50a201103787_JaffaCakes118
.exe windows:1 windows x86 arch:x86

dbbceac39f5975d959814fd9c7244aa5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrcatA
_lcreat
_lwrite
_lclose
ExitProcess

shell32

ShellExecuteA

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.import
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ