b210c307e23b099fc370c5bb0b03a3e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b210c307e23b099fc370c5bb0b03a3e4_JaffaCakes118
Size

131KB
MD5

b210c307e23b099fc370c5bb0b03a3e4
SHA1

496f92af5d50a66a313c35ce08653787a6831c99
SHA256

e4ecae7661503b3e2886f7b96f8dba9549eeb4f2a223ddb2b4e28f9d991a9bae
SHA512

34873febf5ad1433500e599f185d027c23ad258a519cab914565c98f642b1752aaeee4c4a8ccd336c00c65e141cdb41300d31fc876655e52a8cb4de61165c624
SSDEEP

3072:k65UIn+RrvWfrkefTkVEJunNQp2DDji2UA1+aSO6OU:PKI+x4kRVxnNe8jDUA1+q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b210c307e23b099fc370c5bb0b03a3e4_JaffaCakes118

Files

b210c307e23b099fc370c5bb0b03a3e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

365bc051e92555111692e8d003bce00e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
LoadResource
GetModuleFileNameA
SizeofResource
MapViewOfFile
GetFileAttributesA
SetFilePointer
UnmapViewOfFile
SetEndOfFile
GetCurrentProcess
CreateFileA
LockResource
FindNextFileA
EnumResourceNamesW
CreateFileMappingW
GetSystemInfo
ExitProcess
ReadFile
FindClose
FindResourceW
VirtualQueryEx
FindFirstFileA
CloseHandle

ole32

CoUninitialize
CoFileTimeNow
CoCreateInstance
StgOpenStorage
CoInitialize

shell32

SHGetSpecialFolderPathW
ShellExecuteExW

occache

FindControlClose

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ