b84191240856abf9a48cab83a0ae83f5_JaffaCakes118 | Triage

Sharing

General

Target

b84191240856abf9a48cab83a0ae83f5_JaffaCakes118
Size

309KB
MD5

b84191240856abf9a48cab83a0ae83f5
SHA1

e4155e592e7a99de8ea00c243910c50d0548ec80
SHA256

b63cb991fa9b51c53af1d7548d3268f1c31286c79c80eeb4b7325e212c7da681
SHA512

389f9d69d3f2978f28c239e763e31c6a9848174d55ee804b5b5ebe016ac191f689161f4ebf06ee9f9de7ea07595e48a58a69e7c874748119c2b4f88df663ed7b
SSDEEP

6144:uJzOKo/2ue/nihi6MDpUnyWWOokKgSZ8EGk3OiWQunDcMCZJQ:uJzOKp6hfMtUynkaZRGkeiWQunDcMuJQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b84191240856abf9a48cab83a0ae83f5_JaffaCakes118

Files

b84191240856abf9a48cab83a0ae83f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a14cc84cd2bad4642d4d12c4efa50e12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharLowerA

kernel32

GlobalAlloc
CloseHandle
CreateFileA
DeleteFileA
EnumResourceNamesA
ExitProcess
FindResourceA
GetCurrentDirectoryA
GetFileSize
GetModuleHandleA
GetSystemDirectoryA
GetWindowsDirectoryA
lstrcatA
GlobalFree
LoadResource
ReadFile
SetFileAttributesA
SizeofResource
WriteFile

shell32

ShellExecuteA

shlwapi

PathStripToRootA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ