83b3a2ba2d1deb51b59180e249a5a8c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83b3a2ba2d1deb51b59180e249a5a8c2_JaffaCakes118
Size

391KB
MD5

83b3a2ba2d1deb51b59180e249a5a8c2
SHA1

2ac67d580a83905971ce323dd0db06f8e9a65372
SHA256

b545bd4462cf91bb09e4d7eda975683c4b341526cb674b040f120237c1cf6ab9
SHA512

531f614581076440fb841b3cc32c677446c7725474f0d918609f261c930f488f42d6738fc9f4f9198bbab8ae571e6d69d5aea5b478dae9ae35da41df4facfddc
SSDEEP

12288:movmxnTfFr5BlzzZ+O+zF+EshGnPG92zjNhUP+cye2vykd49XzMO/n3jcn:mAm5dlkzgvhUzjNhUP+cye2vykd49Xze

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83b3a2ba2d1deb51b59180e249a5a8c2_JaffaCakes118

Files

83b3a2ba2d1deb51b59180e249a5a8c2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f0267c12108a175e563cb54160a6c8bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetModuleFileNameA
CreateFileA
GetFileSize
ReadFile
GetWindowsDirectoryA
WriteFile
CloseHandle
Sleep
LocalFree
ExitProcess

user32

wsprintfA

shell32

ShellExecuteA

Sections

.data
Size: - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ