b0a9873816555b1e322870c5c662f902_JaffaCakes118 | Triage

Sharing

General

Target

b0a9873816555b1e322870c5c662f902_JaffaCakes118
Size

1.3MB
MD5

b0a9873816555b1e322870c5c662f902
SHA1

af90d7dfb75683d5bce2c2be92c01504726184e7
SHA256

ab1612c117b92e7b97e472b3d8ecf7bd2accc0095e6f6524342467017f5715ae
SHA512

3312da0478421b75383218504d8fe2f32ef493a48e344859cbc7ead50497a6f0ec8832406c4a167e3017bee5b9f3ffea47a7cf59644bd574b65617ebdc3ebbf4
SSDEEP

24576:03edQbC8W5A0YirYhicGy0t8wLvbeZqcR5aByQJmHymEe58TY0Zix+hmo3zS+7PJ:03eIQg6y0nc5ifJSymL58RZxBz7Pfa3e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0a9873816555b1e322870c5c662f902_JaffaCakes118

Files

b0a9873816555b1e322870c5c662f902_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1f41127e51c4a09fcb0aec80965d5ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetTempPathA
lstrcatA
CreateFileA
FindResourceA
LoadResource
SizeofResource
WriteFile
CloseHandle
LoadLibraryA
GetProcAddress
EnumResourceNamesA
ExitProcess

user32

LoadIconA
CharLowerA

Sections

.text
Size: 512B - Virtual size: 386B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ