ae6231adffe8d27a29975015b0e4ace0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae6231adffe8d27a29975015b0e4ace0_JaffaCakes118
Size

631KB
MD5

ae6231adffe8d27a29975015b0e4ace0
SHA1

237b8f6b247f460d49656f26d247112aa7e7d445
SHA256

3dfa811d4ed609f03d04abadc13be2dd7794000e55b997b435bae65a947f4a61
SHA512

34b73bd783d524cc02d43e70cf7cbabee77b3c2af36d9878e3638d12036af1769276c3e92444220931940b975bfbc819f458f862615c02db158911e167dee703
SSDEEP

12288:WzLb1Bv/y1QtkXC5mhLRplhsqFNFonOt+KSPk9AgELj8hct:8Lbn4CwfxjuOt+KD9AgEnR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae6231adffe8d27a29975015b0e4ace0_JaffaCakes118

Files

ae6231adffe8d27a29975015b0e4ace0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ