a2f19323f2e00e025c8bf754e37d5e5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2f19323f2e00e025c8bf754e37d5e5e_JaffaCakes118
Size

15KB
MD5

a2f19323f2e00e025c8bf754e37d5e5e
SHA1

f225bdd4baeba47b4269e16ce3833ca2e3f27c37
SHA256

29962708cad6abb8ba3ab0e83b528b85f98914aca60a90b3a3800bb12ee130d9
SHA512

b9970de7153f3ad3258840a6716c1b8cdad748cd4b6a5299afc1ee4081f57584aefe4df323a067e2d2eba5a2690030e7c4a9f96f56d0ea53522c4348d1a28d04
SSDEEP

384:TFwWF0lMjJF87FEGTBrSHwzQOL+ybVcRPLM:TPJu/V86c5Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2f19323f2e00e025c8bf754e37d5e5e_JaffaCakes118

Files

a2f19323f2e00e025c8bf754e37d5e5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

746808add0fca8bf65b1d9948bcfdea5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetEnvironmentVariableA
GetFileSize
GetLogicalDrives
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
ReadFile
SetErrorMode
SetFilePointer
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ