88c6517a7dec58632337508640e38d36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88c6517a7dec58632337508640e38d36_JaffaCakes118
Size

9KB
MD5

88c6517a7dec58632337508640e38d36
SHA1

3fc02c01ee102f40e1ca2e6cd24519b46e48f1bb
SHA256

af4fcd8f0a8c402e16c28bb6d9f2fcf64e7776ee5017accf7f86be1e05ae1aff
SHA512

7d3e876774286968f70b312c10423ed46aaadcc5ab70c9ea59e7f957cbfa1408b97af894e9bac5d2c436ea879a2aed2bcec5f23eb3cf6503effc105ad4df9c4b
SSDEEP

192:ujptJ/W/Ia7TZ9LmrmI89Hmeyu8rk3DlJnRAADAAsu8NsytY9bUO:IvJ+/5rLmrOHDyTQ3DzRAADAAsuxCUL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88c6517a7dec58632337508640e38d36_JaffaCakes118

Files

88c6517a7dec58632337508640e38d36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ed264f434b6241265cdc707ff6b4710

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
FindResourceA
FreeResource
LoadResource
WaitForSingleObject
GetTickCount
WriteFile
Sleep
SizeofResource
CreateProcessA
GetTempFileNameA
LockResource
GetModuleHandleA
CloseHandle
GetTempPathA

shell32

SHFileOperationA

shlwapi

StrRChrA

msvcrt

memcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
memset
malloc
free

Sections

pe
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ