4bd31bc70d7464d3c1dec30997625eb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bd31bc70d7464d3c1dec30997625eb2_JaffaCakes118
Size

8KB
MD5

4bd31bc70d7464d3c1dec30997625eb2
SHA1

0042d99554bba68cf2d6b6f91e3a97b58ce65409
SHA256

75745259d8fd17aaae06861a2bf2803217c175047ce914fde249a23eec1ac34e
SHA512

113d65c6d0f6ecae48951d1dfbdd3146f23e401c68a8bacfac6a057c2d9a4a30e77ccd79fa3ac1614152dc4ac216593f68f9a18d532931bb51a10e8446e86832
SSDEEP

96:D0q38IQ8SemNAJ5q0plXDWNLwTPaolWR/5nX:gfoSemN2hBA0bWR/5nX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bd31bc70d7464d3c1dec30997625eb2_JaffaCakes118

Files

4bd31bc70d7464d3c1dec30997625eb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a604c6ea79d5ea984febff3382a81f77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
CreateFileMappingA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 1024B - Virtual size: 521B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 597B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14.3MB - Virtual size: 14.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ