1222a5e28e6755a722364c55729580f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1222a5e28e6755a722364c55729580f5_JaffaCakes118
Size

1.0MB
MD5

1222a5e28e6755a722364c55729580f5
SHA1

f633cd8d4417d1465e97d69e347e3b7930faa529
SHA256

62767c529876d8643da821c036579cce02acae9f9f4c64d9174c95cc2317233c
SHA512

f2edcb5862cf163b15b3fc104518ab8963958b82c58db5fe541d6917171229e3dda5918cb263d4d3012ab5e383cc3da1215308de0ed4f395bb13fdc460c4de08
SSDEEP

24576:ILnDxkF/aWSg8OhLPi9IPw/LlgML0mPX5bUJYjwP+b7Fr:ILDxkF/agPP/PiLlgMImPXGJdWb5r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1222a5e28e6755a722364c55729580f5_JaffaCakes118

Files

1222a5e28e6755a722364c55729580f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ