d1e3a897c705bf90e99fae5866a67ca9_JaffaCakes118 | Triage

Sharing

General

Target

d1e3a897c705bf90e99fae5866a67ca9_JaffaCakes118
Size

2.1MB
MD5

d1e3a897c705bf90e99fae5866a67ca9
SHA1

8a553ad826c9d25d29853b3976e079e959897565
SHA256

831d42ef6b8c2a522b0e4de87b157428e2123e04d502edaf694a83bdd9c7f2e6
SHA512

37a706712dddcc9447eb64fdb8bb448b0b420a5120823a9c16d23d661b9cf78b06a19790013e2e6110f9c703c2a343cd09bbf1c79c5b641251c3af1ec2777963
SSDEEP

24576:C9mccQlqdmRsQHJE8Le6F3vgiIQUgfKH9QWwRxw1O6P9zlCOlSt2iaveIMzwtSSo:bQHJRr3dV7rRxClP90Qpi0MSSS/zE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1e3a897c705bf90e99fae5866a67ca9_JaffaCakes118

Files

d1e3a897c705bf90e99fae5866a67ca9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

279f02031f611ef6f5e52befe370e17d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll �

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ