185d6090e962e1f99fd543f6e1b37f4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

185d6090e962e1f99fd543f6e1b37f4b_JaffaCakes118
Size

194KB
MD5

185d6090e962e1f99fd543f6e1b37f4b
SHA1

5a4ae120e3b8268ffed58f35cd9a0f38e97e2c9b
SHA256

6174d014438ea97e86a7e2505197acd525260c7de89afcbe2ee74f06608f540d
SHA512

23520c00241244fdcc876b10521a119b1829656babb7c54693d35163781e8e9cb893b0b2739383dee4d7559581e754e10d362387a06d434003a21eeaf1e09325
SSDEEP

3072:Nsmvf8pGw8DQbUfQeACVkuE9Rv2feKuxe/QEc14O5qNcDINTBh6:NsmvfaTUXxkuEL4eK34EBO5q+cf6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
185d6090e962e1f99fd543f6e1b37f4b_JaffaCakes118

Files

185d6090e962e1f99fd543f6e1b37f4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f469e28d762c4b75f504f50b355e952

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetSpecialFolderPathA

kernel32

ExitProcess
lstrcpyA
lstrcatA
WriteFile
SizeofResource
RtlZeroMemory
LockResource
LoadResource
GetTickCount
GetTempPathA
GetModuleHandleA
GetModuleFileNameA
CloseHandle
CreateFileA
FindResourceA
GetCurrentDirectoryA

Sections

.text
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE