699546a2c0f6190a2308ca92a3707fcf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

699546a2c0f6190a2308ca92a3707fcf_JaffaCakes118
Size

257KB
MD5

699546a2c0f6190a2308ca92a3707fcf
SHA1

d9eaaedc1ac5b8600f097287ce705487c7f43de5
SHA256

7f9320c57870f35e2887e9667222991a1dc5dc321ae82a9f4deeef200893ff59
SHA512

00eb3864717f9adbe9120dffff95b5274b0540a9e351e599c8f58073e8481f65dcdde175b3d3f6529fc8e800ac5f8cc0533c07506f20c1e6e2331f84f14714ed
SSDEEP

3072:QLqaIV555R79/gV7AwrVVYlr8DDdMcKWRtx4Mx2uKjeUN7cgfSjhHEf75yi2e0WE:QLqjdojrVGlrOd13p2uKaUN58EoiPwpF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
699546a2c0f6190a2308ca92a3707fcf_JaffaCakes118

Files

699546a2c0f6190a2308ca92a3707fcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a1f3c85938d839f223b9d794fc14cbfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
GlobalAlloc
GlobalFree
ReadFile
SetFilePointer
WriteFile
lstrcatA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 817KB - Virtual size: 817KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE