483461e43afbaab064804108dc2a4874_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

483461e43afbaab064804108dc2a4874_JaffaCakes118
Size

50KB
MD5

483461e43afbaab064804108dc2a4874
SHA1

9e2080e1fcea57e661cedb736b2cca6f1071f91f
SHA256

48ac005a0720e21f88ed63f6282660a9d3d3dfe6fc875a9e5f589a87d10d685c
SHA512

82e462fca724843851ba9ab78ef479af0ea47fe3585a53b4bd356cf0b554737a53f0e0bff1ae0ab449df3c40c969dedb38533d52acc8bb79ebead6735d5db21b
SSDEEP

768:hf13IwClQ+dicIuaivyCW7FuBVWsUIfKIYHprBD1X51XoK97GYHnuLCp1Pz4:7ClQ+diclfKdhsJKHpvFdGYHi+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
483461e43afbaab064804108dc2a4874_JaffaCakes118

Files

483461e43afbaab064804108dc2a4874_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0336fbd896dec7933d2406d382d1fc74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

wvnsprintfA

kernel32

GetModuleHandleA
lstrcpyA
CreatePipe
CreateProcessA
WaitForSingleObject
GetFileAttributesA
DeleteFileA
MoveFileA
CopyFileA
MoveFileExA
WriteFile
GetVersionExA
lstrlenA
GetProcAddress
GetTempPathA
CloseHandle
lstrcatA
GlobalAlloc
LoadLibraryExA
GlobalFree
FreeLibrary
CreateFileA
HeapAlloc
GetProcessHeap
DeviceIoControl
HeapFree

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE