d4d7beeef3888321a78674df46361a81_JaffaCakes118 | Triage

Sharing

General

Target

d4d7beeef3888321a78674df46361a81_JaffaCakes118
Size

110KB
MD5

d4d7beeef3888321a78674df46361a81
SHA1

074b37749e2ff69af214cdd80b73c937e27aeb86
SHA256

1d7d2aaa693a9771a2e85a3f2d58b9c8af3cbdbcc345602ff40c2b73e109e882
SHA512

954ff1f2ba9f3c91b70d72087d8e31a3ef2d08c18da9557277b427590ccdb3fda75ee5dddb49899474ff150b4000ea4912cba9bb417495d98037eefafb5b8ef8
SSDEEP

3072:nCinhmbJ/Ej7j1NrYb8XnLGGRHGZmGjRgyd:znhmbFE5Nr8WLRdgmWRz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4d7beeef3888321a78674df46361a81_JaffaCakes118

Files

d4d7beeef3888321a78674df46361a81_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a604c6ea79d5ea984febff3382a81f77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
CreateFileMappingA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 1024B - Virtual size: 521B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 597B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23.5MB - Virtual size: 23.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ