4377971c3f3f5adf2f7a2b08d105d8ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4377971c3f3f5adf2f7a2b08d105d8ab_JaffaCakes118
Size

5KB
MD5

4377971c3f3f5adf2f7a2b08d105d8ab
SHA1

99fc473a64950bf333bb5c908b2c4055932ead90
SHA256

855613ea937e19605ee30284cf268c2afb62d9cc607ecbffea84b9adea82992a
SHA512

563759e699787dbbaf4cc52f80ee2243ded70b913c9d547666de672f898487c73a766e1b25904757ce371a641a6c9202ac4b3ac030aa7ecb00a52a103c7d7888
SSDEEP

48:ajZyT0ks8viUWwkJfiTnls85/YUGUwisiBcJkLURAwuc4qauD6:CyT0ks8zzD/YUPwkyJkLU6Lu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4377971c3f3f5adf2f7a2b08d105d8ab_JaffaCakes118

Files

4377971c3f3f5adf2f7a2b08d105d8ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6af48c7a7d63b2c8c4c1c11edc2ffdfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA

kernel32

GetFileSize
lstrcpynA
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
FlushViewOfFile
GetCommandLineA
GetProcAddress
GetSystemTime
LoadLibraryA
MapViewOfFile
UnmapViewOfFile

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ