75623ab4ef9c03464e52f0068272c3b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75623ab4ef9c03464e52f0068272c3b7_JaffaCakes118
Size

2.0MB
MD5

75623ab4ef9c03464e52f0068272c3b7
SHA1

87076a3a5d783d8c5dc9a85be4edd59e7529683a
SHA256

16ff77d1fe3d7848bd61b0a2aebc8a9b8b2beae7bc5586237a83c1d813acbfd4
SHA512

fe05ab98acf9f45609b48be9518118bffa9413326628792bf729c5d7bda3fd31f5886537069cfc53b5b15c32d827d9159ddf3dd0d3b95e84b8cbf1d67a366c54
SSDEEP

49152:QBImiJGfjeLTik/0ROer6ozxXPbMNgyzOuXokwTmdn4CoS2:QBtiJItk/6r6OXgNg6mG52

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75623ab4ef9c03464e52f0068272c3b7_JaffaCakes118

Files

75623ab4ef9c03464e52f0068272c3b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ