ae7b6b1906a6e993a703fb88c57d1b03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae7b6b1906a6e993a703fb88c57d1b03_JaffaCakes118
Size

5KB
MD5

ae7b6b1906a6e993a703fb88c57d1b03
SHA1

11dfad46eb0f78a7d17e85ef23743c102464c9e0
SHA256

df12080f93260787f826725818caae1c4e3b2d704c768e694a7dee4ca877c44c
SHA512

4ac67557afcea209c4364049f4ef86b50fa5ac22c584281ec613c95235b11958dc138ac0d98dc2d3a232111723a22cb6f85e8d5b0ee5ad4fbea8233fcf7596c0
SSDEEP

96:eXRbqRRq+oHbiwvlafwqG3+77xpgJtK8ygjnWi41e67NPwjN32eh4b:GR2RlTwQfwZu7lpgaG7Wi477dwdfhi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae7b6b1906a6e993a703fb88c57d1b03_JaffaCakes118

Files

ae7b6b1906a6e993a703fb88c57d1b03_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

6a4ad7ab29728080a197693e695dd5b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
HeapFree
GetProcessHeap
HeapAlloc
CloseHandle
FindFirstFileA
CreateProcessA
lstrcatA
GetStartupInfoA
MoveFileExA
WriteFile
CreateFileA
lstrlenA
GetTempFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
CreateDirectoryA
Sleep
lstrcmpiA
DeleteFileA
ReadFile
SetFilePointer
GetFileSize
GetSystemDirectoryA
GetModuleFileNameA
GetTempPathA
GetShortPathNameA
GetLastError
CreateMutexA

user32

wsprintfA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE