5f61d005851e680473923239afb60ed2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f61d005851e680473923239afb60ed2_JaffaCakes118
Size

645KB
MD5

5f61d005851e680473923239afb60ed2
SHA1

cd87ebcdf04a30928916983da0ce5e4dd8f52384
SHA256

f4baf50be18a07b0dfda8d63c937c9d5ea2825b7633bf86a733585bedde0a7fc
SHA512

3f472f0a3487a95e5efb190cfc743d551ff52abbc77f049f31c3b07f283a8adaec53554148d447415de8d1e81acd6ab26c7d51e25d5f138de701daa46bf6e61d
SSDEEP

12288:JzlCfUozGoRz2G6VO2vV9k2ZuerC537fAR2uZ6Tg8e/65tiGoiVn:No6oJ2PvVx0erELfAR2u1Z/00jih

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f61d005851e680473923239afb60ed2_JaffaCakes118

Files

5f61d005851e680473923239afb60ed2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f0267c12108a175e563cb54160a6c8bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetModuleFileNameA
CreateFileA
GetFileSize
ReadFile
GetWindowsDirectoryA
WriteFile
CloseHandle
Sleep
LocalFree
ExitProcess

user32

wsprintfA

shell32

ShellExecuteA

Sections

.data
Size: - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ