a3ef596b75dc53d644522aab54f32f92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3ef596b75dc53d644522aab54f32f92_JaffaCakes118
Size

56KB
MD5

a3ef596b75dc53d644522aab54f32f92
SHA1

e4162e366b58e31186bd12399c54ebe429139ff4
SHA256

c961faeeac3d6a17e57c65595ff6ed9bb696b0a02b5bb37893acd4b30fd49cf3
SHA512

a63f701294e7b7ac9f5a5a7404e18320af5641c931d43a1a1d29a47889f61802f17bc660abdbc7d114552db7c78c282012c9fdcd95f9732d263c7f5b17f4f5ca
SSDEEP

1536:C0giiJZEE8hjsUXB+j56huJkHYD8QNMYqqleYFjuKo:DsJ6E0B+j5NuYDvFebKo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3ef596b75dc53d644522aab54f32f92_JaffaCakes118

Files

a3ef596b75dc53d644522aab54f32f92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ