b1d21dcf95ba8a0f6c18863cb0e4a08d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1d21dcf95ba8a0f6c18863cb0e4a08d_JaffaCakes118
Size

587KB
MD5

b1d21dcf95ba8a0f6c18863cb0e4a08d
SHA1

48070e4a4b7cd3bf5691119d7af94b279bc1cbd5
SHA256

d4659fa7ec761e23dbfcb74f0b3838160e666c7b83c77afed0de9478b8268a7d
SHA512

ca6c7a863762795e3b16dd15d3077dd81f061e82af8000e6185b4dea65a4f019e5c907834a20e4f2200adee6cf22feaa72685323e0ff2f0aebad5a4c89b7865c
SSDEEP

12288:gaONqCVR7HVT6x8rA2KunkRQa4Q5ShFU489Qzd8u97t4aw2:gzqQ71uhinkH4WSHVz+uVt4i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1d21dcf95ba8a0f6c18863cb0e4a08d_JaffaCakes118

Files

b1d21dcf95ba8a0f6c18863cb0e4a08d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a13ee2bd542e30b8d805240c3433d2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 581KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ