285318408c70c071fc698f4707aa8d36_JaffaCakes118 | Triage

Sharing

General

Target

285318408c70c071fc698f4707aa8d36_JaffaCakes118
Size

103KB
MD5

285318408c70c071fc698f4707aa8d36
SHA1

37b7ea7cda09dc0f95ed8c2b76ea6c655284110c
SHA256

a61d8cf38d951688ec87816c5af5807134372f9e7eeb4103583510e8b754de83
SHA512

c5ab8975dca89b2bc74813cd53d37694091ba66555f53409531e5faadc58f67007bf18cd354c86326a5830f7a73bfe3f352bd9a6bb140e71dcb8608c52f7e5a2
SSDEEP

3072:5mCPy5hSzp620XPLSakyxuY/XxiiXvJgvRiJ:5BzpY/NuMxiiXvKvRA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
285318408c70c071fc698f4707aa8d36_JaffaCakes118

Files

285318408c70c071fc698f4707aa8d36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2bf10fcb6977cb97a081d462a036b6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
ReadFile
SetFilePointer
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 866B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ