ad1192ffd42ca0e7a14b3ad644b7c247_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad1192ffd42ca0e7a14b3ad644b7c247_JaffaCakes118
Size

59KB
MD5

ad1192ffd42ca0e7a14b3ad644b7c247
SHA1

e9738392f176818786c264f706c4a3d84e8bb56f
SHA256

d6f745e9fc9364a7e4057907f64bf5ff6f9549fbbbfd1118eb7382700fb0dde2
SHA512

878ffc56e6e2f80ac9d2ff8d8ae6c3fc802c813e23f0f1deda68395620f0ce716c7778fcf21a6b7fd017f64dd75c791ad45a7e023c12a22c4914324f60824a8b
SSDEEP

768:mSemQaWRPHB5QKm/2KDC1fYzFA/mfn4goDQjKJ290xd7atCAlBdR5e+Kgp64:Q2r+SCGa/En4DQjM2ioBdR5Agpp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad1192ffd42ca0e7a14b3ad644b7c247_JaffaCakes118

Files

ad1192ffd42ca0e7a14b3ad644b7c247_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a604c6ea79d5ea984febff3382a81f77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
CreateFileMappingA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 1024B - Virtual size: 521B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 597B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39.3MB - Virtual size: 39.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ