b415fdc9258f5e9bc04aadfc4b96d42d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b415fdc9258f5e9bc04aadfc4b96d42d_JaffaCakes118
Size

1.2MB
MD5

b415fdc9258f5e9bc04aadfc4b96d42d
SHA1

acedbe2b17539761f2df8913fe77340af68f3563
SHA256

ae2133835e6d295319b35ce74ed37300811bcdde7854d26f9fab10bc518d302e
SHA512

2e104943b713b4fdafd1147bc63119155570148b8f95692bfb444315845c6f1f41fc3ca92ec70032d9db74ff9346b7e47661c42285128c56f565ffa25a92acbc
SSDEEP

24576:w4AJS3ZruZ/jxAPtoPRt+K+eAluIFjjIC7MGD43xbRuoEXGFLXoE3hLEBhuh3z:w9iaD5hOuOMcrDwkGqy1uy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b415fdc9258f5e9bc04aadfc4b96d42d_JaffaCakes118

Files

b415fdc9258f5e9bc04aadfc4b96d42d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a13ee2bd542e30b8d805240c3433d2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ