29ee555d37bd6b2a84d83ef568f1e156_JaffaCakes118 | Triage

Sharing

General

Target

29ee555d37bd6b2a84d83ef568f1e156_JaffaCakes118
Size

53KB
MD5

29ee555d37bd6b2a84d83ef568f1e156
SHA1

1b289ecd7a4047a57d315a9145a10055d8724407
SHA256

159ff0ab31ad8e9767fee6f9243979edc4c3128c23c051471fcb489225db3010
SHA512

2a60674c0d4da896f4f444c64914ceff91828589fe029f7ea5d87d6855eaba04a65c9f815dbd913e39d6608f276b71a956dd1744c6fe186873e7fb853279576a
SSDEEP

1536:bvxsmLaMeyiJmvURXkCgeSLZkO8zCBk+ha6s:bvx7LcccRXkCgeS8zSpap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29ee555d37bd6b2a84d83ef568f1e156_JaffaCakes118

Files

29ee555d37bd6b2a84d83ef568f1e156_JaffaCakes118
.exe windows:4 windows x86 arch:x86

173b029d981dcd3c8d88d17215d11c23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
GetTempPathA
GlobalAlloc
LoadLibraryA
ReadFile
SetFilePointer
VirtualProtect
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 1022B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 442B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 586B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ