477acf02a557dba8f639bdd8b740e623_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

477acf02a557dba8f639bdd8b740e623_JaffaCakes118
Size

97KB
MD5

477acf02a557dba8f639bdd8b740e623
SHA1

4da04d7dfa2615f693718d330fd390f70487f2d9
SHA256

3324828f3454e5d263acc088f54e9e32e6bd910e515be1b07308e658395bc408
SHA512

a1772cb5d40f8a586729f3ff1784d9299ef779d500866fcc6aee73bda8022bc231c962b461458c8f04dcc054bf72b01a057888fdda214be9953c4c257917a6a8
SSDEEP

1536:i0giiJZEE88jsUX/f5V6huJkHYD8QNMYqqleYFjuKfMcXrP3wP1undCfqD4Wvyqr:jsJ6Ev3vNuYDvFebKpjwd87vNP2RG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
477acf02a557dba8f639bdd8b740e623_JaffaCakes118

Files

477acf02a557dba8f639bdd8b740e623_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ