142a88463a8a1da82d96e6de3e92357a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

142a88463a8a1da82d96e6de3e92357a_JaffaCakes118
Size

2.6MB
MD5

142a88463a8a1da82d96e6de3e92357a
SHA1

6e882e9659b8870dd93a7a4ca5c9ae78b19f404b
SHA256

5aeb1b35daaf2fabe377b2a0e0ac9a3ced797fda58e83c343e0c3c587d8e160c
SHA512

4dfc636d92e477d949f64ca91e04f6d4acd6498e5d0ea7828d949a7b716dc870c31ffd309126c7780168979380bd6f5afc40f11d114d88bc88f045dcb81ee85f
SSDEEP

49152:JorAfSV4tRPsw42xY+HWuxcZ9uvJDmg3NaNwvzMG5yXwOoW3a+PDS5fY:JHfs4tv42pBc/uvBmg3/PyXBc+re

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
142a88463a8a1da82d96e6de3e92357a_JaffaCakes118

Files

142a88463a8a1da82d96e6de3e92357a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfa65dedd9fb621da68094f57507d60c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll �

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ