b202bdd5011e4f33ff07d720e0a9b585_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b202bdd5011e4f33ff07d720e0a9b585_JaffaCakes118
Size

13KB
MD5

b202bdd5011e4f33ff07d720e0a9b585
SHA1

9fcbc741ec4d9fd595cecd804e1f11cd826da4a4
SHA256

f10fc35ca71c80c63c87f7885d39fa3de241c3ecd45e572efdfe7934b1f59d1e
SHA512

c52efcc9e4492a15423999eb57f0761ae83451ca7ac294ffc9870216de29efb52ce3a3a182d027bd9b86a1d350100e7fad1df8366b354e5ba4d6e3b3b5d1ba6e
SSDEEP

192:o+rI8WaPl0OiOeYddQlJQQ05NcvqHUS1O2k4wZNlvqBnfS1wa1:rrI8Wql08eYdQlmxzUS1twFvEfv4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b202bdd5011e4f33ff07d720e0a9b585_JaffaCakes118

Files

b202bdd5011e4f33ff07d720e0a9b585_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61d6fdf307f435705ffecf4a9ecd4280

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA

kernel32

GetStartupInfoA
lstrcpyA
CloseHandle
CreateFileA
CreateProcessA
ExitProcess
FindResourceA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
LoadResource
LockResource
RtlZeroMemory
SizeofResource
WriteFile
lstrcatA

Sections

.text
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ