264ea6ed0f24e7c9d02e0eaf128a4122_JaffaCakes118 | Triage

Sharing

General

Target

264ea6ed0f24e7c9d02e0eaf128a4122_JaffaCakes118
Size

12KB
MD5

264ea6ed0f24e7c9d02e0eaf128a4122
SHA1

329e5d0a93b491b29683943c70f3ed4f198db6d8
SHA256

385a59bddaafe6968dec9c40d7397d897f2cdb763558e6ed66e92e9339389cdf
SHA512

738cace29f0036cbdf05e3f0d63afaa833c14c6de12c79cd1b1dfa974b443a8b2ff7d4db786dbb595befffa7936296b8e3b737ebc3d9345cac0fc943161687c5
SSDEEP

192:CYxlg0UUZjt27TqU+pB4HDV3P/Znc/EL5uzkdc:lxlgrUdcgaVf/ZcNzoc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
264ea6ed0f24e7c9d02e0eaf128a4122_JaffaCakes118

Files

264ea6ed0f24e7c9d02e0eaf128a4122_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ