62c65cab73a27fb41f632de1d8c9a1b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62c65cab73a27fb41f632de1d8c9a1b6_JaffaCakes118
Size

11KB
MD5

62c65cab73a27fb41f632de1d8c9a1b6
SHA1

123658a31f070dd2dc908c8f862d4025430cd35a
SHA256

5c2908109188a9bf2e2c09a1aa6cd1536fcde5711db494a5563a714361e78c58
SHA512

af2135af9d478ddaf9efdabee0b58eab41d7b1af04b8c25a48e9899ad631a6e5953c0afa927f6cc186a4662b68d887c2f781ba7f46d26aa78493ee18f5f8cee2
SSDEEP

96:WAbPsuMYCVA65HG2QJTMNF4mrD7oEefR6c5YONfeZEWVAr2KU3mONfeZEWV4+xFW:VPt+fmtwHVERfwcPNeTZ3TNeT4+vDS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62c65cab73a27fb41f632de1d8c9a1b6_JaffaCakes118

Files

62c65cab73a27fb41f632de1d8c9a1b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfca078dfb2c199b193e255ba8ee3880

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
WriteFile
CloseHandle
CreateFileA
CreateProcessA
CreateThread
ExitProcess
ExitThread
FindResourceA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
WaitForMultipleObjects
LoadResource
ReadFile
SetFilePointer
SizeofResource
Sleep
VirtualAlloc

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ