96811212279b3c964ed3e38e8f5ba3f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96811212279b3c964ed3e38e8f5ba3f3_JaffaCakes118
Size

200KB
MD5

96811212279b3c964ed3e38e8f5ba3f3
SHA1

58a105de7126d28a91f2413fcb6b102eb7537a97
SHA256

bd360d4db829694da7d5e24571ec8597deabfb1ce721550c017785864e08a277
SHA512

661fc60bfe7288f995a5c56b65d95d735058f9c481ddddb1d6a671fe05a124a87e3b6510eb627f76ed201373cdf55ad43698c243334e9f7ad16e24ac1262d9d3
SSDEEP

3072:lhCCBiogidM9a/CkmyEQJH/HoK6/ZymxJ4PPsEDz:lQCBemM+C1yEQpI7BJUsY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96811212279b3c964ed3e38e8f5ba3f3_JaffaCakes118

Files

96811212279b3c964ed3e38e8f5ba3f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

036a9259e2f27ca3401cbf8ebb9afd1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
WriteFile
ReadFile
SetFilePointer
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
GetProcAddress
GetModuleHandleA
lstrlenA
GetModuleFileNameA
SetThreadPriority
GetCurrentThread

shell32

ShellExecuteA

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ