aad09f5c86a053135f20da29aa2fe3ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aad09f5c86a053135f20da29aa2fe3ba_JaffaCakes118
Size

16KB
MD5

aad09f5c86a053135f20da29aa2fe3ba
SHA1

f70ed41c0eb1f81c57bd771fea2561df27292003
SHA256

5fa68a0bf75d85d4e5167aba59f5342f5557fdb7a07a874c2468e5eb2765e863
SHA512

f949b592db00c3739bc089b1c98c15b39c0c108c814b95ed01420d7bbafd904b9c506c72c3d82338be6697028c0c4e06ca39a729a960b2ce1c131126a8c23875
SSDEEP

96:+XXa/8AwFXwYpVVf0tbXXlh1AfdZRmbPNfhmIqBXxUU37hZdcwoE73Z1QeYq:0Xa/8AwFXvz2efd8tAIqBXZ37L6g7HY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aad09f5c86a053135f20da29aa2fe3ba_JaffaCakes118

Files

aad09f5c86a053135f20da29aa2fe3ba_JaffaCakes118
.exe windows:5 windows x86 arch:x86

49c4c125599814446cd0c2ab2b3bef7b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
GetLastError
CreateDirectoryA
CloseHandle
CreateProcessA
CopyFileA
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
WriteFile
HeapAlloc
GetProcessHeap
GetModuleFileNameA

shell32

SHGetFolderPathA

urlmon

URLDownloadToCacheFileA

Exports

Exports

start

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ