423b93ff03a089853a1e5205f4114545_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

423b93ff03a089853a1e5205f4114545_JaffaCakes118
Size

108KB
MD5

423b93ff03a089853a1e5205f4114545
SHA1

ab6ff709cf952dec8dcc50244eee0e5179dd3b7a
SHA256

604bbee512df5fef6d6cc0a2f650057169323142f854c4baa8e9ffb3445fc097
SHA512

8461e959dfecbec529ff7cd63000097135ec75f49c8d017a7bb496ce73cf6da3bb7e3d98d96357d2764054fb03b1167ed04a0a0959e95e05c6facd02c53b7b3f
SSDEEP

1536:JTjkBU/K1rLqqhSl7kD/2ArDiq0wDkBhe1aFnmNtfMVJDH6B1j1A/P1N7Uvcv:cr1nTN2AlHkC1asNtkVJIU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
423b93ff03a089853a1e5205f4114545_JaffaCakes118

Files

423b93ff03a089853a1e5205f4114545_JaffaCakes118
.exe windows:4 windows x86 arch:x86

399c9f076e8dab08a1e6586d6aa70ea4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
CreateFileA
GetTempPathA
FreeResource
CloseHandle
SizeofResource
LoadResource
WriteFile
LockResource
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_INIT_
Size: 32B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE