63bf2cc9afeb0066b5c429939c2e2e90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63bf2cc9afeb0066b5c429939c2e2e90_JaffaCakes118
Size

88KB
MD5

63bf2cc9afeb0066b5c429939c2e2e90
SHA1

ba6dbb82aedd9e3a5c1e112267e1bc90c5c52b8e
SHA256

f81e7e2b3620808c1eedfaff2d394a57d9bb7bcf23434f85ce3e0008cc2667c4
SHA512

0ee1c42e5ee16007b0ed8a5e48f1a94b293147952e22672524cc641127e2b02bec0f03c0234f582798b1855fb4ed5f9f2140242d8a6bd2a141ad9c2856b3283e
SSDEEP

1536:kahU1SjiuiGs/WSHfr2gDkHVHSlfzcPmQKGfIgCj8fLPQWKymsBnxSN:kwUSiffr30HYcPF7TIWKybBnwN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63bf2cc9afeb0066b5c429939c2e2e90_JaffaCakes118

Files

63bf2cc9afeb0066b5c429939c2e2e90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93901d7acc315269d76a882f137e78ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
WriteFile
CloseHandle
CreateFileA
ExitProcess
SetFilePointer
GetTempPathA
ReadFile

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ