394d3afc28e0287634f8608051080ec4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

394d3afc28e0287634f8608051080ec4_JaffaCakes118
Size

87KB
MD5

394d3afc28e0287634f8608051080ec4
SHA1

db6c7a4fbf28fcdd265c6116b9d22a9fff368cbf
SHA256

f565e1f994b44d4f1fa2e04173f2c048b66093278ce78de45bc7dae998dc41ac
SHA512

27c10d192549b696dd79c3834ad0434d6d1a673d1ca01dc03d301c97c8f6cc523ac0765ec743e867b044eda71fcebf2902db5e83c9b8814cce17aed932303209
SSDEEP

1536:qonujkqkSZZZ3gdtibXr8y1W+2oessUYLRONLI48u9sRAcXIUKtn/bhP:qonujSUlbXYmW/hsfEw524cXIltnThP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
394d3afc28e0287634f8608051080ec4_JaffaCakes118

Files

394d3afc28e0287634f8608051080ec4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a794bbb7a400a12a67d7708c35df1192

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetFileSize
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
GlobalAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile
lstrcatA
lstrcpyA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE