a6c75bdb8b25416df82429b3513b9d50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6c75bdb8b25416df82429b3513b9d50_JaffaCakes118
Size

68KB
MD5

a6c75bdb8b25416df82429b3513b9d50
SHA1

be1e0f101c7126d49ada0339083fd1c0798833b3
SHA256

5f6b7de35282935bf919b3dc2db89f130e4d02927f289f7e29b181b8410b7abd
SHA512

927fdceb0e2aee2d210908f6525aae7abb32a4a0f7508225c5d69e46fc563209ea14688ab2b2bf19859c141431adb96611238547f56f7afd12bb3fe1d67356bb
SSDEEP

768:STDlAJ3KkHzfUZFjsS2GMYNykKF2qGrMQbl5O3eNWx/c3iFIqNo3rta78UdJail2:4lwzfUZpPtxiR04eNWB+wNJDj1s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6c75bdb8b25416df82429b3513b9d50_JaffaCakes118

Files

a6c75bdb8b25416df82429b3513b9d50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb5539853902e549d70ec88ea2fa0c6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
GetWindowsDirectoryA
LoadResource
LockResource
SizeofResource
WriteFile
lstrcatA
lstrcpyA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE