319c06554f89d391b6f54e1f2a0a3aaa_JaffaCakes118 | Triage

Sharing

General

Target

319c06554f89d391b6f54e1f2a0a3aaa_JaffaCakes118
Size

384KB
MD5

319c06554f89d391b6f54e1f2a0a3aaa
SHA1

132457e2adeb7ead7a88c879843dd933382bbd7b
SHA256

c0cb84d82f4e46b89eb58fb65ceea7faa157ebc62414c4d6723659c77449cd71
SHA512

7043cca97eddee61e354c765dcda64ac2e6246f2c7989266ef7a13d6fc73162164f4daacab4ef948ee697c9293b42492b7147e0a627e7c161d9b624090339ec1
SSDEEP

12288:4id1Bv/Bn15lBqRY+MuZjYlopWiZHKNS6rrJhOA:xRn1XqRYbuZmkWGH8S63j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
319c06554f89d391b6f54e1f2a0a3aaa_JaffaCakes118

Files

319c06554f89d391b6f54e1f2a0a3aaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ