c19eb7f2e36777db82a2f26c5f80cc46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c19eb7f2e36777db82a2f26c5f80cc46_JaffaCakes118
Size

642KB
MD5

c19eb7f2e36777db82a2f26c5f80cc46
SHA1

ed66a25548a3b59ddea5723ec643c42cb08f72ba
SHA256

6f021680cbb38bb2471432ec96d9770f3d27250dae7f9d4b3225b20b4726198e
SHA512

d911abb86ae01c7567a858a53df60fe5c8b8245a2e3a250772b1c3d5225d4c021ecf770b33264578790e88110e4e70e417a7836cdea54e509c905a963b230ede
SSDEEP

12288:yZnIpn2I0CqoFjSO+D1Ed2XzhN43VcAeKN7kO5qrF7urUSoFKvE:SY2Bb0jh+1Ed2DccAeK+OfrsQvE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c19eb7f2e36777db82a2f26c5f80cc46_JaffaCakes118

Files

c19eb7f2e36777db82a2f26c5f80cc46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b4cc2be0324264fac1338e1727600aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 629KB - Virtual size: 632KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ