2641e5cc8d4edc563350a810bdf7e4c5_JaffaCakes118 | Triage

Sharing

General

Target

2641e5cc8d4edc563350a810bdf7e4c5_JaffaCakes118
Size

62KB
MD5

2641e5cc8d4edc563350a810bdf7e4c5
SHA1

93436840f65f60c442b4e8ab12d45367aa5e8b4a
SHA256

4504527b16274f37e229067103fcd93565317cdd10305df2cf002364e2bf4c20
SHA512

3a466640ed8fd4be700caae8e535959009dfa74d974adeee1ff8a7be7402333fdb97b30cbc433efc5e166f37ffbcdd9afa87b35f5bac819b387dee5bef0dfdb5
SSDEEP

1536:UHgiiJZEE8tdqrKSdwzU6dyLFxjemIri5lzzLIHkb:isJ6Ek41gjAxjemIMz9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2641e5cc8d4edc563350a810bdf7e4c5_JaffaCakes118

Files

2641e5cc8d4edc563350a810bdf7e4c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ