867d9ba65d66cc698c0125e8b9c7cf9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

867d9ba65d66cc698c0125e8b9c7cf9f_JaffaCakes118
Size

527KB
MD5

867d9ba65d66cc698c0125e8b9c7cf9f
SHA1

a1c330cbe662195cff2a5113d1f20865dae92b43
SHA256

46394e08670bbc61848d6cae88da2fe3fb0eb996d5fa1b6a1ae309eb2f42878b
SHA512

3fc1ff0ca3f0aee252f3fe79bcb7e49db30b4c02c9856cbef3d5a0a06b4b2e0044fc4e542972192ca06b341d1c1d72754c0aa4f96652f25579b7ab6d72af424a
SSDEEP

12288:O1Bv/sTgMYkMTdXdwyK85NcOsQ6qM6YWzcha0LPR1q:EnaUkWldT5NZs3cvC1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
867d9ba65d66cc698c0125e8b9c7cf9f_JaffaCakes118

Files

867d9ba65d66cc698c0125e8b9c7cf9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30.6MB - Virtual size: 30.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ