0d7c67e3511af15a39ee99f684530910_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d7c67e3511af15a39ee99f684530910_JaffaCakes118
Size

146KB
MD5

0d7c67e3511af15a39ee99f684530910
SHA1

f2b2622b74723b60bc204084dbde34a3156bf2c4
SHA256

7837fe64f3fc6b55b2d276834247647c151b2d83b664ac46236e676d9d8365a2
SHA512

74850224fdead74c84145351c0d850a18640af1e3db33030331cf0b254d7cc83fca3dbd22e2e5c7b246d27935d56ee6e39979ae2e54d34a5dbffed522c226fa1
SSDEEP

1536:hrIwqYWQrZhoWDPon4pQZ6CNF3JJ44fqlrefNjkBU/K1rLqqhSl7kD/2ArDiq0wE:RWg1Q4pQZ6C73v4Moegr1nTN2AlHk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d7c67e3511af15a39ee99f684530910_JaffaCakes118

Files

0d7c67e3511af15a39ee99f684530910_JaffaCakes118
.exe windows:4 windows x86 arch:x86

399c9f076e8dab08a1e6586d6aa70ea4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
CreateFileA
GetTempPathA
FreeResource
CloseHandle
SizeofResource
LoadResource
WriteFile
LockResource
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_INIT_
Size: 32B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE