c14e2a4d3cba35d79f94eb541fdf115f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c14e2a4d3cba35d79f94eb541fdf115f_JaffaCakes118
Size

27KB
MD5

c14e2a4d3cba35d79f94eb541fdf115f
SHA1

92b2f9813e677cf5959043851d47d77072e4d143
SHA256

f23d8a348e32ec5e23c71698d059649f1d1383d80aadaa8b0ab9b52375f3da5e
SHA512

ab5a014c3e2bbcee38815d8bccb742a4103b9003b1a2163fd9d9bb0975f429f47ade19a9aee35125a19e3c87ae3cf77d8170755bcd0681bbf85a0ec1bfc53257
SSDEEP

768:gQTHZMnSdyvUbjJTcQEFvhKL6C/M+NPtCobKP+/5gJZOI:VHYSsvCNcD94xRfCcF/SJZO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c14e2a4d3cba35d79f94eb541fdf115f_JaffaCakes118

Files

c14e2a4d3cba35d79f94eb541fdf115f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b4cc2be0324264fac1338e1727600aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ