b6fd79126ad1f9f3162af09274eae6a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6fd79126ad1f9f3162af09274eae6a6_JaffaCakes118
Size

101KB
MD5

b6fd79126ad1f9f3162af09274eae6a6
SHA1

c6a2f6b8588ddbdb8a894b8fbb86f9621bbabfa2
SHA256

dcbee5d1724495e32f8c493816100c9d293d6677eabd281715692d58a6199d09
SHA512

f55783c080c2b617970ad3bd002501707bd05250801b09f9daaf4ac8047797a2399bc34a8e66d3f9d4c8afd8f9bddf97224db89cc19ea06c7f4f27eaf26d5806
SSDEEP

3072:meTRhVV9cavcvUz+iEMpY3ysbHhcmV1M7KRrBIOSO:1RhVV9jAU5EoKtH6mzM7KJqOS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6fd79126ad1f9f3162af09274eae6a6_JaffaCakes118

Files

b6fd79126ad1f9f3162af09274eae6a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b4cc2be0324264fac1338e1727600aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 99KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE