daefda99a5e4e2136d4eef00f2b47eb3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daefda99a5e4e2136d4eef00f2b47eb3_JaffaCakes118
Size

22KB
MD5

daefda99a5e4e2136d4eef00f2b47eb3
SHA1

103397899dbe0bbaea7014440f16a0575e16a0b0
SHA256

d2a56ffa0b748a3ad578218c55cf7fb7656d8c9069b47792743c9d2ae697762c
SHA512

be49dfc7afab72cffbdae7bc6907954e27bec8ffbc69621e0297481d75de6caac7ac4bbeaba85425af82894c13f1873fa0982035e54e629f99c4139a663c26f2
SSDEEP

384:SH3obF7TweUpG5ctAtiWdeqbFkuXQhikwtftOev/ov/V9V:SXo1aTWdf0enonV9V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daefda99a5e4e2136d4eef00f2b47eb3_JaffaCakes118

Files

daefda99a5e4e2136d4eef00f2b47eb3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66b18ad74eb7db9d498d7ab6c08faba7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
LockResource
LoadResource
FindResourceA
GetTempPathA
CloseHandle
DuplicateHandle
GetCurrentProcess
SetStdHandle
CreatePipe
GetStdHandle
GetModuleHandleA
GetCommandLineA

user32

LoadStringA
wsprintfA

shlwapi

StrToIntA

msvcrt

strcat
strlen
malloc
_strlwr
strcpy
strcmp

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ