2ce6c890172ec60f37b24cc7326453c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ce6c890172ec60f37b24cc7326453c5_JaffaCakes118
Size

118KB
MD5

2ce6c890172ec60f37b24cc7326453c5
SHA1

35fdc0499660272ea79df469240f32ba44dc5843
SHA256

927ec3af567349e453b95042db40ba0cff76360a04fed176f2955dddbf0424eb
SHA512

1472a9da605d4c0f92042f28a8c173db7f59803133c956bb15a9d748fc5a02f043e05e61dbf556103b2121a4fcc478b1e1651084ceba9b4ac0848b043cba885b
SSDEEP

3072:ou9KNYzQ3K8NXplMLigAmaL+zARXj6ahneuupa:Zw0QTppKihLDnKpa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ce6c890172ec60f37b24cc7326453c5_JaffaCakes118

Files

2ce6c890172ec60f37b24cc7326453c5_JaffaCakes118
.exe windows:1 windows x86 arch:x86

6f7778e93056ca517b4ebb08b3caf41f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetModuleHandleA
GetTempPathA
LoadResource
LockResource
SizeofResource
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.data
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 297B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ