b85ac2289610e314dc7f85397d6ce9b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b85ac2289610e314dc7f85397d6ce9b1_JaffaCakes118
Size

96KB
MD5

b85ac2289610e314dc7f85397d6ce9b1
SHA1

3a6f7c96d87b0cabd50cd066b6451c50d7e6ac2d
SHA256

7d2308b6edbce48eb158538f1f7c32a4dd402175c71850d08dc5b8e14fa1495a
SHA512

d78e9951192b2f24db282d5b11013c4e78198e5c1fbbe8747be2b273a25d229c07f9e2dbd089100e93651cb985ffa72be858d5768ccddadf9abfb7f21212acd2
SSDEEP

1536:Np8O5C3Zf18U0N7RTcM/eg3zJDwtVnowViudCfTLu9cuMVfx0N7RTs:Nhed1tS1oM/jLeiuofTLumuMrS1Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b85ac2289610e314dc7f85397d6ce9b1_JaffaCakes118

Files

b85ac2289610e314dc7f85397d6ce9b1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dc73a9bd8de0fd640549c85ac4089b87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile

Sections

.text
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ