09373b557c28b632d4e8f0c6055028a3_JaffaCakes118 | Triage

Sharing

General

Target

09373b557c28b632d4e8f0c6055028a3_JaffaCakes118
Size

39KB
MD5

09373b557c28b632d4e8f0c6055028a3
SHA1

fda2e20de668c8fea2e348203d8e912cc8f92e81
SHA256

70c374a064dd770ed772a473dcb48f5523afba1e2ac0c71f1e9eafb959a5d780
SHA512

64077d1603a342cd45307f27ede36b5cd4d1a9e87a6ecc3bac3514eccfc3ec6fd14085fc272bf9f80dcc5246fa0d2a1655f5886d4385cdbb2cafcd9a0ef5277e
SSDEEP

768:60sEbonrjn8figGJMbiLOVcbcb+WewFKQTAB0CYsxQn2zmmtHQ0/:6B3notbiLOibcK3yMyCYsxlzmmK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09373b557c28b632d4e8f0c6055028a3_JaffaCakes118

Files

09373b557c28b632d4e8f0c6055028a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85bd25830e058a5bd184f05354ac44a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetLastError
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryExA
VirtualAlloc
VirtualFree
lstrcatA

shell32

SHGetFolderPathA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE