c85ce501db477ddf5782b87de88fe35d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c85ce501db477ddf5782b87de88fe35d_JaffaCakes118
Size

24KB
MD5

c85ce501db477ddf5782b87de88fe35d
SHA1

aaa1780469a6481de81e66ec73dbe61354795661
SHA256

1b54567cbeb85151c9065570f44f3b0e5e5933931d4a40511c1140492f4aeed2
SHA512

e333bb0819f665179b72ed994a411da0b9948a40c2dd72dfa7d461f787bb3b9ace408bb4b1406f77495646707fbaaca3a1272db53ab46572ffec6b4f2b065239
SSDEEP

384:42tZ+M4FcTEkiXPbtQOo2zxnZt2wfODjaTr+vZQ4a:LfpN/iXa2o26jafMQ4a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c85ce501db477ddf5782b87de88fe35d_JaffaCakes118

Files

c85ce501db477ddf5782b87de88fe35d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

680004d9a28e3cc1a0bf81273134b22c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
GetSystemDirectoryA
GetModuleFileNameA
GetVolumeInformationA

shell32

ShellExecuteA

msvcrt

fopen
_mkdir
fclose
fwrite
fseek
remove

Sections

.text
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE