a59f688f1f01c2ff3ed63e5dd96c006e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a59f688f1f01c2ff3ed63e5dd96c006e_JaffaCakes118
Size

83KB
MD5

a59f688f1f01c2ff3ed63e5dd96c006e
SHA1

6943eda51d95c7bad899fc8cacc8f94ae9b6b82e
SHA256

a902940f8a23da77246761a5badb3ce19c8bee5ac753033599858ffcabc8033d
SHA512

e47f05f98046170ac44ea00af4e63ca1388132de87c21fc5f6a63852a7fe55527d89fdddb32799d774fa406ac479a970374af1200efaabe803481c3dce8d1143
SSDEEP

1536:4K/2pzyqX/2pzyqJDAuD8XlIsYLLOGAtvSSqQCIGx8ZKvolKC3JoTHUj/zQeNn:f/SyqX/SyqZfOlIsY2GAtvS0CIGQflZt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a59f688f1f01c2ff3ed63e5dd96c006e_JaffaCakes118

Files

a59f688f1f01c2ff3ed63e5dd96c006e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c8f164c686736d09511d3b9b7a314caf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcatA
lstrcmpA
GetProcAddress
LoadLibraryA
CreateFileA
GetFileSize
ReadFile
LocalAlloc
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
GetCommandLineA
lstrcpyA
GetStdHandle

user32

wsprintfA

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ