8211fe7b46d13dd0067a75d1ae2cf364_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8211fe7b46d13dd0067a75d1ae2cf364_JaffaCakes118
Size

11KB
MD5

8211fe7b46d13dd0067a75d1ae2cf364
SHA1

59d5f8774e723b2134269172ed86d121ef829d66
SHA256

e5e74a2a3fc57cc85d8f137914d082f6c6d48e9085093572b818f011617dd89d
SHA512

fd1931ffd90940f47cdbae8428fa99068dec3ed15a45d9575b567beea2b7432ed9eb8a32f2b351d747c2d5544f2c3150b9e21d0a1636a4e4459230a3dc40c0e6
SSDEEP

192:iiBVgbzLSE99IVGxfWdky1oLcFIa2maZYFrtXbXvG5DsXLSuSo2ZIB2V:tBVgbr99IwsB1o4F0maWFrdfZbSI4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8211fe7b46d13dd0067a75d1ae2cf364_JaffaCakes118

Files

8211fe7b46d13dd0067a75d1ae2cf364_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f209c6c7a8961d6275577cb4318da395

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
DeleteFileA
FindFirstFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetTempPathA
ExitProcess
WaitForSingleObject
GetExitCodeProcess
GetEnvironmentVariableA
RtlUnwind

user32

wsprintfA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE