fd47147dc9722456dd2962a8aa0cfea6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd47147dc9722456dd2962a8aa0cfea6_JaffaCakes118
Size

74KB
MD5

fd47147dc9722456dd2962a8aa0cfea6
SHA1

74997a3ae74eb2e591b2fbe299033fc6bbd5a365
SHA256

c2be2e5c1c86c9c9fce0a81ec207855f508a7c2ad52a3603f73e9682c694a70e
SHA512

1a2e37ecfdf5e79d87adf73bd82bad02b74d56a5cd6fa920f4aec780e9c76d5593a17000e2a36a3208ac3fa3c4482ce4860dde39ccbaed51c326d1fd005bac1e
SSDEEP

1536:uQIaNvr4N4rGg/Sn2ATB768gyAm9ZyJDqlIhMv5S52ao6jslpPRh5:y4r4N4uhtAO9Aq2hMRLanslxR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd47147dc9722456dd2962a8aa0cfea6_JaffaCakes118

Files

fd47147dc9722456dd2962a8aa0cfea6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca285fd696f41fd689fcc30f49a4c098

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetTempPathA
LoadResource
LockResource
SizeofResource
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ