27005c3adf9f599b4203ed2252baf962_JaffaCakes118 | Triage

Sharing

General

Target

27005c3adf9f599b4203ed2252baf962_JaffaCakes118
Size

145KB
MD5

27005c3adf9f599b4203ed2252baf962
SHA1

d2ce5c972982fb4815b33a6f7c0a286360583e0a
SHA256

2776de2bba5b8d10376c72777d990cfb42e90d1634f55813b4eee24f949e9ace
SHA512

212ec55e32ebbdae156f0f501b58e7c7f64637afee795cdfa957150f66041fe62afd32fbd9af33a57fcc4da9d4ac5d1a16bded1623c6ccd24c312acdb3861468
SSDEEP

3072:QjObJeHVMZpwbPjsFh392dvjDJx8PMVyyUh730w:QiIMZpkPSh392tXJukVyymEw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27005c3adf9f599b4203ed2252baf962_JaffaCakes118

Files

27005c3adf9f599b4203ed2252baf962_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a13ee2bd542e30b8d805240c3433d2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 139KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ