b4ca5d0d2f6ce3decdcf7e889fbf64c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4ca5d0d2f6ce3decdcf7e889fbf64c6_JaffaCakes118
Size

241KB
MD5

b4ca5d0d2f6ce3decdcf7e889fbf64c6
SHA1

6cf8beb7e9bd5d7136429d272abe73e4a0058f05
SHA256

234719f4794111823e9b1faae9a3f9f24bd7f00f012cbae6e1e7d00dd7065a2d
SHA512

d24c2be04dc919ef6ec474a1d535bc2fe8c7b7600efcfe8b84dca7ac9da9e26588b322093155635cc402f16f3784a2a26bd060ebf1eafefe610b7fd0ea4f63e2
SSDEEP

6144:X4sXK6XlmIMLPkuWCgXmyaunn8g6DevHrFn3BemHBh4MlgD:+6XlmhLR6z6D8Fxemhh4MCD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4ca5d0d2f6ce3decdcf7e889fbf64c6_JaffaCakes118

Files

b4ca5d0d2f6ce3decdcf7e889fbf64c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ