a19c1237065e8712b094a9625daaad56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a19c1237065e8712b094a9625daaad56_JaffaCakes118
Size

11KB
MD5

a19c1237065e8712b094a9625daaad56
SHA1

0b742eb0fa5405516b27d4f8706202a3442ebf6e
SHA256

2637e40478acdc458d3089f7f342f1d3a920380d54ee9b75815fde3bdc69ae8b
SHA512

69f78a9a072ef3d8db28da45bb8ad2ed95468245a04f3749c11d3dd56714a75f0109b8da82380101ec97be9f23e1e7a7f3dee0a1f13a9765f26d8642deb4795b
SSDEEP

192:iiBVgbzLSE99IlGxfWdHD1opzhRiqNTgT6u3dqm/JlvbaJOnUIKJFP/Nm1ULBU/W:tBVgbr99IAsBD1odvfuQmnx+FP2KBU58

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a19c1237065e8712b094a9625daaad56_JaffaCakes118

Files

a19c1237065e8712b094a9625daaad56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f209c6c7a8961d6275577cb4318da395

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
DeleteFileA
FindFirstFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetTempPathA
ExitProcess
WaitForSingleObject
GetExitCodeProcess
GetEnvironmentVariableA
RtlUnwind

user32

wsprintfA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE