0e8595bc72f1e9e0ae392e513b120570_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e8595bc72f1e9e0ae392e513b120570_JaffaCakes118
Size

4.1MB
MD5

0e8595bc72f1e9e0ae392e513b120570
SHA1

0ce8a7e227b9bb6ee9e2dbc2f1f7dcb9ce09cd9a
SHA256

45aa65db13563d20ac2249b5bedcaadc216a70a354614591c445b511fd793b0a
SHA512

640305029191415dd5830f1b137e3c410823dd38e3271b3d1f1d76be8f0db6bc335425a61eb0d3c6e36ec2235edb418ca8fbbff38ed2fa29f315d514b5487290
SSDEEP

98304:QBtiJItk/6r6OXgNg6mG5vc0hFkxTv6fhQfH42:YBk/I6jg6V5tFv5uHD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e8595bc72f1e9e0ae392e513b120570_JaffaCakes118

Files

0e8595bc72f1e9e0ae392e513b120570_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ