63d6afc070864b36bb66b6ec78907932_JaffaCakes118 | Triage

Sharing

General

Target

63d6afc070864b36bb66b6ec78907932_JaffaCakes118
Size

37KB
MD5

63d6afc070864b36bb66b6ec78907932
SHA1

ff39969bf2e06c389c5efc8e9ca63b14606276f6
SHA256

fae6156f4e311cf1d0aa6749fc3df08bbc5697be14e97460dd11752224751d73
SHA512

23c3857e9de5398fa437a653ec8b61a0036ecd8e897ec08f486ef353e58c56c08e917399f5fc88b8aa25f679fdecd75703ded3faa7394e4f52f14c6b55ae4df0
SSDEEP

768:R//eG4Sxxd6tAM+2e8FcPQbvmNyiqeZ0c71w:QG4Ud6tFWcQ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63d6afc070864b36bb66b6ec78907932_JaffaCakes118

Files

63d6afc070864b36bb66b6ec78907932_JaffaCakes118
.exe windows:4 windows x86 arch:x86

344ac1076f2c934341c9829dda6968ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
GetExitCodeProcess
GetFileSize
GetModuleFileNameA
GetSystemDirectoryA
GetTempPathA
GlobalAlloc
GlobalFree
ReadFile
SetFilePointer
Sleep
WriteFile
lstrcatA
lstrcpyA

Sections

.text
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ