0badc83aa2c20edba6721b7e660ea3fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0badc83aa2c20edba6721b7e660ea3fb_JaffaCakes118
Size

1.4MB
MD5

0badc83aa2c20edba6721b7e660ea3fb
SHA1

05fbe586c1ea568fd770cc661501b9fa9b2e09ad
SHA256

e4da5b85616b15bcca4b56d3bf36d85660938f6c6754b0226301abfa18b1d9a3
SHA512

f78e8b948eca3bbf20fa00c5b7ca44d6d80128bcc5e22a100bf88cc999c40bcecc8072f5b4cf1523d84d5060f6f55dae26d52e68d9b4224ee5075d62b7635f50
SSDEEP

24576:z4sjXD4bL5BmxLubm6k7lcsdlcPUbOYQHh0S2eb34ER:z4sjXD4bL3wLCWBHZmHh05eL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0badc83aa2c20edba6721b7e660ea3fb_JaffaCakes118

Files

0badc83aa2c20edba6721b7e660ea3fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b4cc2be0324264fac1338e1727600aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ