67f8f755e2f1981bcfd248a2b1743be9_JaffaCakes118 | Triage

Sharing

General

Target

67f8f755e2f1981bcfd248a2b1743be9_JaffaCakes118
Size

15KB
MD5

67f8f755e2f1981bcfd248a2b1743be9
SHA1

573c5b80fef8bda3022ae85b3fee6e9871f03ac3
SHA256

4b9510d2dc64d87d45e7272e6adf98c7f3d74508909f903a61536757dcad0e92
SHA512

44f057f82934fe8f3f44f1c08aeef34490b4bfd5a18610da99d03341952e577857db12f57d5749cfac1b97708a4347e2a43be7b98a02678da3c002719c515d61
SSDEEP

192:BWt7drq7KeXgzmoBE4QzHVIybVUzTNPLM4MZKkDO:g7drqHwzQhL+ybVcRPLM7q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67f8f755e2f1981bcfd248a2b1743be9_JaffaCakes118

Files

67f8f755e2f1981bcfd248a2b1743be9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

539336fc7914851751d309456940ce72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
GetCommandLineA
GetExitCodeProcess
GetFileSize
GetSystemDirectoryA
GlobalAlloc
GlobalFree
ReadFile
SetFilePointer
Sleep
WriteFile
lstrcatA
lstrcpyA

Sections

.text
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ