602826cc1613cc56297be8dc65c29d11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

602826cc1613cc56297be8dc65c29d11_JaffaCakes118
Size

12KB
MD5

602826cc1613cc56297be8dc65c29d11
SHA1

4a47fa0a8a0ecf4b48225c4a9628c4f706104192
SHA256

c1c9dfdf01ec0c203d03293f22e87cf24ab6b06a4928c4253d61005160b73f60
SHA512

17e024cf5d25fa158a141d659daffca8d5d059d78c57f68a8b3a9c82c0d552dac2f5f34b3e7479838a5647acc58fd3d7fb86ca3e75553d21911e99cc05fa39bf
SSDEEP

192:Ro7R8cRjvjJ+NL3N03B3i7NsPeNNnkAmhFouwnjrMR5shEwKQinFqL:YF5aJNsPeNNnkjjzwnsRYEwfaFqL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
602826cc1613cc56297be8dc65c29d11_JaffaCakes118

Files

602826cc1613cc56297be8dc65c29d11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee4a85a24a78b96f1f446cb4f1944dde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetTickCount
SetLastError
GetProcAddress

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ