65d19e104365af9507a37fa5f42d4c86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65d19e104365af9507a37fa5f42d4c86_JaffaCakes118
Size

192KB
MD5

65d19e104365af9507a37fa5f42d4c86
SHA1

07a117679df70770f85ca4bec2510ba3ba25a4f3
SHA256

0aa6ab09ac7d08142a3473da4c717387390fd0fb941096090f8c8537c9d83ce9
SHA512

a613858922f044fa3c9df03d1744d4da27c822c14ed04abd7abde5aeb06d2f9f3294ab69b91afc40da66c30b6bd19f5e2f9f0266aa54ae9f074ff7b15e724c70
SSDEEP

6144:i4+bijJDvFeKBw8v92A7BBv69oJ7bNOI59Q2fy:Se1Bv/S9oj59Q2fy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65d19e104365af9507a37fa5f42d4c86_JaffaCakes118

Files

65d19e104365af9507a37fa5f42d4c86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ