954ea050adda79e2a537b15b3d29688d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

954ea050adda79e2a537b15b3d29688d_JaffaCakes118
Size

4.9MB
MD5

954ea050adda79e2a537b15b3d29688d
SHA1

9a9deb8534936518675f9d0eb2a93c82087bc53b
SHA256

a30ecde9c3b3716a2929c2b5a9e199553fa09cb07bf48dc67f0f356c640fc7fa
SHA512

9e45acbaa3d711c3c535558da27b2f2c9c1ae2bffbc2a7784b622435ff5cf1cf80560e031eccbfdaeef0e0dda2b881dcda1128728bfe1b49df98e799b4cef5cb
SSDEEP

98304:19uy640E0DPFixeksBQYH7+Hw2beQ6m59VSMl1o6AVdnPSFDFY/sN1e:1T0E0Dcx9g5+H9w29VSMbDAnnKFDS/sm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
954ea050adda79e2a537b15b3d29688d_JaffaCakes118

Files

954ea050adda79e2a537b15b3d29688d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2bf10fcb6977cb97a081d462a036b6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
ReadFile
SetFilePointer
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ