a81c6055ae32366b64dc07e53c7f80be_JaffaCakes118 | Triage

Sharing

General

Target

a81c6055ae32366b64dc07e53c7f80be_JaffaCakes118
Size

188KB
MD5

a81c6055ae32366b64dc07e53c7f80be
SHA1

48bcdbc6f8f615c0342cf1366c4c7ed36415c42e
SHA256

e37f4930396a6c6ff023ae991cfd1eb4756e31895d40d7985766f14c4a5fd2f0
SHA512

8c6db2eec3df69e4bba6f8501d52823cba257a738ced83cf2c06d767d171099f605e3a0081ba86ac360a83adfb9feb33be766f72fb9ef607fdc1cbec2030d467
SSDEEP

3072:zc+kf+kf4Yz2x2m1xk5SEcQ/pKq0gV6h2A/teAkOIHNS+P5:I+kmkTol1xk5Sa/pKq0jh2+eAkVEu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a81c6055ae32366b64dc07e53c7f80be_JaffaCakes118

Files

a81c6055ae32366b64dc07e53c7f80be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96d648fd09f58e6f7e61ec936939c8eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
lstrcatA
CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetTempPathA
WriteFile
LockResource
SizeofResource

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ