f610d3dc1c48f4a471768890175af275_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f610d3dc1c48f4a471768890175af275_JaffaCakes118
Size

2.1MB
MD5

f610d3dc1c48f4a471768890175af275
SHA1

7b51704344b8050e8023803fde8bfe7a7a8136be
SHA256

1311b9a1e282213dfc5c15a6b7192296d4d3a8944d8ffbdd2e3aabfc08dbbe36
SHA512

8088b6eca698df868b651fd2711ad2dedacbe88f588fd8470d876b22385239c9afe539af8eb6c3e685a10bd29128e4f4efcd0af0478e5195dd4e7c8706fbff94
SSDEEP

24576:69mccQlqdmRsQHJE8Le6F3vgiIQUgfKH9QWwRxw1O6P9zlCOlSt2iaveIMzwtSSv:DQHJRr3dV7rRxClP90Qpi0MSSS/zz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f610d3dc1c48f4a471768890175af275_JaffaCakes118

Files

f610d3dc1c48f4a471768890175af275_JaffaCakes118
.exe windows:4 windows x86 arch:x86

279f02031f611ef6f5e52befe370e17d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll �

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ