4de4237978ea9604e21267bb2d4a6ce0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4de4237978ea9604e21267bb2d4a6ce0_JaffaCakes118
Size

678KB
MD5

4de4237978ea9604e21267bb2d4a6ce0
SHA1

b5b6e77e103425e89bdf374066165827118514f9
SHA256

ece46054a85c3595f10cd4722a0b324bd83b2a5bcfdfea38268542530adae725
SHA512

87d7da7aa2f74f368d707ab9b0d10b65cd1504558f74fbc476257c30b96aa8c3fc351d8fa9db5fed5b677b67b92c84f88f93ef46e1a9bb9fec107250f2e8a098
SSDEEP

12288:V1pOKfRxYtXnt7AFWMd97OpljqC4hRfeLCkXk0Tg0vy3mf4Kwm2+5eX0tdmfJGen:XgAw8dzYjqC4hRfej0I5y3YT5hdmfXj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4de4237978ea9604e21267bb2d4a6ce0_JaffaCakes118

Files

4de4237978ea9604e21267bb2d4a6ce0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

6f7778e93056ca517b4ebb08b3caf41f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetModuleHandleA
GetTempPathA
LoadResource
LockResource
SizeofResource
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.data
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 297B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ