662096da00e44d55bc95f54ceb6d242b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

662096da00e44d55bc95f54ceb6d242b_JaffaCakes118
Size

332KB
MD5

662096da00e44d55bc95f54ceb6d242b
SHA1

277b7ee1f4994fd7d3995ac945a4300edad96524
SHA256

c483dcdd110c67502e7b606116b40044df4ba7c959b4c7eb6b24372198d80232
SHA512

16016549511f208d014ba31984bd979c3659867935c0b9b29a44f630f083724e45749f61e6a9adb5a55f10ec925e6477e74edeb56e75d40867f247b07725ceed
SSDEEP

6144:e4hJDvFeKBw8v92A7BBHdn1tlXQrlNP2U8IfT8yhX4sEhLuFqODbrwzU:h1Bv/3tlXd41VLJDbrl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
662096da00e44d55bc95f54ceb6d242b_JaffaCakes118

Files

662096da00e44d55bc95f54ceb6d242b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ