72db7ee0f4c80c4c0028ec8cf064c7c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72db7ee0f4c80c4c0028ec8cf064c7c8_JaffaCakes118
Size

87KB
MD5

72db7ee0f4c80c4c0028ec8cf064c7c8
SHA1

58e75473988ad6c470fdb360ea656ed2fbe7d462
SHA256

8114a92e1f7a805d4cd03919170dce179d7b5af168df3154525aacbcaa07dc89
SHA512

8f9c13086214d72e912a70717afea38881c3026899725aaaf6b5e8907f92742d214387b9f0d576c09eedfeffb6e88ddde542f68bd8a413a04d451c771260530a
SSDEEP

1536:kahU1SjiuiGs/WSHfr2gDkHVHSlfzcPmQKGfIgCjEcv6h790Ywy79JKUDqktnFB:kwUSiffr30HYcPF7w+Wpy7CU1FB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72db7ee0f4c80c4c0028ec8cf064c7c8_JaffaCakes118

Files

72db7ee0f4c80c4c0028ec8cf064c7c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93901d7acc315269d76a882f137e78ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
WriteFile
CloseHandle
CreateFileA
ExitProcess
SetFilePointer
GetTempPathA
ReadFile

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ