c941172b2a5eff53b09a4afc2fafccc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c941172b2a5eff53b09a4afc2fafccc4_JaffaCakes118
Size

110KB
MD5

c941172b2a5eff53b09a4afc2fafccc4
SHA1

9c64f86e13beb99066ab65d15916eae986c01b34
SHA256

764c8b40254a24dec4ffcbb99aafd03b91deed94a2f66643dd42a3302eb07e51
SHA512

257c7c605d6f75585e7fa08817058c2e67d92c56496a0253f947ed31c0907155eac42ec73a48eb30538b2047b551566cca86ff2c49bdd367f455881ac78839b2
SSDEEP

3072:9C2PE8AL9Zw8O1JZ3aGfahEDQmwqQ+0AkIX:4c0RZw8O93bft0mUXAkIX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c941172b2a5eff53b09a4afc2fafccc4_JaffaCakes118

Files

c941172b2a5eff53b09a4afc2fafccc4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec0a86983e0a01f7dc52f262ae94fcb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

lstrcatA
GetModuleFileNameA
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
ReadFile
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ