00b1d5d177c823ae34913b9a65091526_JaffaCakes118 | Triage

Sharing

General

Target

00b1d5d177c823ae34913b9a65091526_JaffaCakes118
Size

5KB
MD5

00b1d5d177c823ae34913b9a65091526
SHA1

1f4f376c1e9e36018b5e453bf6d4b3dec7338997
SHA256

dbc86e09e6b5d78e4b94b37040573e78e16675b25e63860049a9ec3c791a58a2
SHA512

141bd1ba3ed41b7fbbc099616fc9b16327bdaa1238f667cca84a0c3bd274270c16d51754f8e3d632d9f4289d7f672e4e5b8518ce28d4aeb075df4b3130d3ab41
SSDEEP

96:VwysY5ki6Pg2AIL1xdc+w+ZVuCHe9bRXKrY2cXN:VwyssbIg2V1xdc+dDPHe1R6rJcd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00b1d5d177c823ae34913b9a65091526_JaffaCakes118

Files

00b1d5d177c823ae34913b9a65091526_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0524f940a3ee01b97a2d800c39f6f701

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
HeapAlloc
HeapFree
GetProcessHeap
GetProcAddress
LoadLibraryA
GetModuleHandleA
lstrcatA
ExitProcess
CreateFileA
GetWindowsDirectoryA
WriteFile
Sleep
CreateProcessA
CloseHandle

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE