66f349b032396534d578503d4c63c1f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66f349b032396534d578503d4c63c1f1_JaffaCakes118
Size

738KB
MD5

66f349b032396534d578503d4c63c1f1
SHA1

54273d0dc4c0993119a18b2a18ce21a5905fee16
SHA256

ea14b6d0ed3cff7e04cc2dfa7a491c8475451b037d9c08ac75d0816541e5a10c
SHA512

93a6ab66bfd47c30c12ee2d2cc7eebb377c78455f3e732471af05ce38ba82d0b0c10a8fb9a2d6084c5ea34a0b644ad444afcd35d70f886f3224d3f58319d80b8
SSDEEP

12288:9pnNEvbUxuhptIZuRAb8uh9sHpN3E2vXXZnECOZADQo/56:PFMwaI7h9U33tXpnEpZADZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66f349b032396534d578503d4c63c1f1_JaffaCakes118

Files

66f349b032396534d578503d4c63c1f1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

99cbc61fd1e70ac2889d024cea9a11d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CreateProcessW
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
GetTempFileNameW
lstrcpyW
lstrlenW
GetModuleFileNameW
GetModuleHandleW
GetTempPathW
GetFileSize
lstrcmpA
DeleteFileW
MoveFileW
CopyFileW
GetCommandLineW
Sleep

shell32

CommandLineToArgvW

Sections

.data
Size: 738KB - Virtual size: 740KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE