1aa9f93da9a8a033ac2fd70dad06e3a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1aa9f93da9a8a033ac2fd70dad06e3a5_JaffaCakes118
Size

41KB
MD5

1aa9f93da9a8a033ac2fd70dad06e3a5
SHA1

8517f29f0ab7f0bca25e651ef7609d302bce902f
SHA256

1e46bca58327f83833b58e736524a4a8ec4db608ece5fa80fbd0131530c4561c
SHA512

c1b93796b53574799717b824e60870255194c57aae2d7ac9f0d979ad51c4a149325db90d122339f25f02c4f10ab760b756df72b4b6c3ce72a22af18d3cf1bc17
SSDEEP

768:RhD1Qhh+E/NrGptOp1p2pZpnpaplQoohajDrRi0+r2eK5GETbUc+FjxzAJG:Rshh+wVOtWX+zp6lQRhaXFi0+r2eRET0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1aa9f93da9a8a033ac2fd70dad06e3a5_JaffaCakes118

Files

1aa9f93da9a8a033ac2fd70dad06e3a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85bd25830e058a5bd184f05354ac44a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetLastError
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryExA
VirtualAlloc
VirtualFree
lstrcatA

shell32

SHGetFolderPathA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE