f03cb5648e4d56333785229604c78ab2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f03cb5648e4d56333785229604c78ab2_JaffaCakes118
Size

64KB
MD5

f03cb5648e4d56333785229604c78ab2
SHA1

8aedcf35742684eda89725f7655530eadfa52f4c
SHA256

401a88897ad0d46bb1a9892e995ce4ff077871a4642d59a541576f8aa662d495
SHA512

2df1245c9ee542e2cae1d9b166f0e962cf34ac9632e47a6880084ddc9324fbf3abcbde1c5bfa6411fe63d1ec61b4cd9c240c80f1a6a1d490aef1218be67f5458
SSDEEP

1536:LvgiiJZEE8rjsUXTUt3+RAu8PDx26huJkHYD8QNMYqqleYFjs:7sJ6EcT+3+GLx2NuYDvFeH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f03cb5648e4d56333785229604c78ab2_JaffaCakes118

Files

f03cb5648e4d56333785229604c78ab2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11.7MB - Virtual size: 11.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ