29b4a52eb090e43fe83c8a44ad606479_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29b4a52eb090e43fe83c8a44ad606479_JaffaCakes118
Size

25KB
MD5

29b4a52eb090e43fe83c8a44ad606479
SHA1

69e97c002e526b8035e1fb1308bf42410a6877c5
SHA256

11598b22960d9e155927a30b140832429680571eab821cf0c5bb7d1dfecf644b
SHA512

94192965c5324f2793643e3a1ce9a32dd972cc8e448bb9712451753b5e3a96ae86c32cf05e1cc7d1a7a552637caa4f71aaa7c6c32435861a94b01234d48be034
SSDEEP

768:19npTHAxFO1HT8lsmIkK5CtlRZ5vn+D0L6D0V9:1dhHBBT8ltIT52lRXxL6Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29b4a52eb090e43fe83c8a44ad606479_JaffaCakes118

Files

29b4a52eb090e43fe83c8a44ad606479_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a13ee2bd542e30b8d805240c3433d2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE