05ed6d1208d5a23f52c708269940e4f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05ed6d1208d5a23f52c708269940e4f7_JaffaCakes118
Size

27KB
MD5

05ed6d1208d5a23f52c708269940e4f7
SHA1

7ebd4d543df36807ac6dcb35faced32620c8fd00
SHA256

707a5eb4569a6e9254f0d2df1b01a1acc0c74ee6c34ff7d679bf0f498a9c1cc5
SHA512

ee6b99e0671fa06d18d3bab4d7748eb8e4a82f6daa8394ed4d0e39dd89da28188f3e6c41b9559cf5236fec90aad695374b41a4d23d2b901fe527dca05e50488b
SSDEEP

768:UWXaNYmY+hEeXplk8t7vsXzj6Bn4odRTjsZ:UkaWspk+7vsXzj6h4od9U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05ed6d1208d5a23f52c708269940e4f7_JaffaCakes118

Files

05ed6d1208d5a23f52c708269940e4f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25d8edd79994573a522d10652c702656

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
DeleteFileA
CloseHandle
SetFileTime
WriteFile
CreateFileA
SetFileAttributesA
GetFileAttributesA
lstrcmpA
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetLastError
CreateFileMappingA
GetFileSize
UnmapViewOfFile
CreateDirectoryA
ExitProcess
GetModuleFileNameA

user32

CharPrevA
MessageBoxA
CharNextA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE