f5cb8374b7f98a3796118dd332c23096_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5cb8374b7f98a3796118dd332c23096_JaffaCakes118
Size

401KB
MD5

f5cb8374b7f98a3796118dd332c23096
SHA1

c5eafe932493f650ba4f92dc761c177982dc77a3
SHA256

179107791859874fe7e3f38e3671ffb789cbceffe3e2ed697aa02a498592b0df
SHA512

bfbc980fa757294e23b588245acd138ed91d651a80c943764ed8569ebe4653fa5bb422676a10efa3ebc9e914f8bfde1f8c2ce06b4aa808a034a1e4fb9c10bac0
SSDEEP

6144:I4AIJDvFeKBw8v92A7BBk3Dvgncai1ZoQIMLPkuWCam408EfDFnk517dNP94IRJy:Ku1Bv/kLgFirhLRRECDFkT3V4MKd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5cb8374b7f98a3796118dd332c23096_JaffaCakes118

Files

f5cb8374b7f98a3796118dd332c23096_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ