c1213c447b463a6b70d5e28f6a6b6bec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1213c447b463a6b70d5e28f6a6b6bec_JaffaCakes118
Size

535KB
MD5

c1213c447b463a6b70d5e28f6a6b6bec
SHA1

6ad84ff20d5639094423eb064d56bdcfc2452a3b
SHA256

3d7d2a51a6119a4bfe9a087346384e0bf59562c9d7780b4f247529826cd5cbab
SHA512

c1c9184aac61eeec2f1b83a88411df501f9ed0a50b45378b30cfd51ef184700b754e2430d27889e0e958fe35fc202721fb12d887a89a209f7169670b0eb07bfa
SSDEEP

12288:QaBiCAFeAsA0otXz5xwLYLxKBgpXd6Nlb/cK:DoSAsA0g9zlDpwNe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1213c447b463a6b70d5e28f6a6b6bec_JaffaCakes118

Files

c1213c447b463a6b70d5e28f6a6b6bec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4570fb5c491a5e3696198d44e54a0a17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
CreateFileA
ExitProcess
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
GlobalAlloc
GlobalFree
CloseHandle
GlobalUnlock
ReadFile
SetFilePointer
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE