a1467e00fde7208620f60ba37b192d48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1467e00fde7208620f60ba37b192d48_JaffaCakes118
Size

570KB
MD5

a1467e00fde7208620f60ba37b192d48
SHA1

e54a6c564260215558d93a195e9e5391542d5a87
SHA256

3cd941a6805c813880d35f8165fbcc484182196c75168a3cc668f3ae319e7203
SHA512

505df52ea6e56cb82a2f43e6e6e7577cc376b916655cf9c2df6e297836bf7be9c9f9ee62abf4f5c2c18957bd42caea91b0af2fa37e0fdf75e1d29222e4f4e1a3
SSDEEP

12288:5ArUy0ju/cFDUVRPcgMEbpqbbBvIpg6FPEVtiyGTp+iWoUPJ1KI:5A4VjmcxUVyt2piQpZFPEVc/p+iWo61K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1467e00fde7208620f60ba37b192d48_JaffaCakes118

Files

a1467e00fde7208620f60ba37b192d48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a13ee2bd542e30b8d805240c3433d2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 567KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ