87b1987b318f6e5b56e67ce8b6bf0734_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87b1987b318f6e5b56e67ce8b6bf0734_JaffaCakes118
Size

456KB
MD5

87b1987b318f6e5b56e67ce8b6bf0734
SHA1

69b96afc363b1d8da7e724dea61b1f726759245e
SHA256

c1f07c14447bd6a5aaea5936747904de0fac1cbe93bbf37e9c7ce2d1c87033c5
SHA512

95ccd35cea19692f4b88b08bd31e136cb9d60d069b9679a3ffe3ce7ea5ebfd00b0e6b1b69e0f30cb63effac04e641ab91ba2ab6608234d9899b30f0606787f35
SSDEEP

12288:MzolmhLR6sFJFonGp+Q7I1DQ9A0Enj8hch:Ook7DuGp+QwDQ9A0Ej/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87b1987b318f6e5b56e67ce8b6bf0734_JaffaCakes118

Files

87b1987b318f6e5b56e67ce8b6bf0734_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ