3a377c9e9503ef3fab10474d1eb5cff6_JaffaCakes118 | Triage

Sharing

General

Target

3a377c9e9503ef3fab10474d1eb5cff6_JaffaCakes118
Size

5KB
MD5

3a377c9e9503ef3fab10474d1eb5cff6
SHA1

ae6abc0977e5c641ee8ecb29c6f192f53d2bdffd
SHA256

9742246989605cfb265f9078fa7643aca054b907da8f0410ba7eaee86f57f377
SHA512

68568accc489ddc660141ecf81d188e687e7654134596ec3ea5d03e35f60cb6893cbaa20532f3ba1d36b9834cbde4b0591fe7d005d72c1a9a3f514440e493807
SSDEEP

48:iHQ/94oGyjjJ4Ng1zAvmWOmUM0jgFttE4zOVpViEjKzM/MRfJ:CCrZqg1zLPM0UFtuG6zjKqMRB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a377c9e9503ef3fab10474d1eb5cff6_JaffaCakes118

Files

3a377c9e9503ef3fab10474d1eb5cff6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144.5MB - Virtual size: 144.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ