148bd58b0994774abacb90ea348bb299_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

148bd58b0994774abacb90ea348bb299_JaffaCakes118
Size

16KB
MD5

148bd58b0994774abacb90ea348bb299
SHA1

5771d80850551225919e9b720baa454eee70edef
SHA256

938029987fdded89c80b679d4d506965779c8855e4e818bd092ed73aabb2ea7d
SHA512

e0d0b991d11ec0ee449553f31d1345ca9c17bd513690523fc81772b83cad2c72db9a88ece3f3b7a472887afaca270ce7c179b9d7fdc0a0990cb7371132671547
SSDEEP

192:DmGwWlwFtGI7QQ1Yxrk7hN9I5O7xBw+g8SRiTPjBOb9EzDHGyLwJIbIq+VixLd:DKWot6Q1ykdNR+2zTPjRfmyMg+Ved

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
148bd58b0994774abacb90ea348bb299_JaffaCakes118

Files

148bd58b0994774abacb90ea348bb299_JaffaCakes118
.exe windows:1 windows x86 arch:x86

5b052913ad57def32d5cd816cef2f96f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
ExitProcess
GetFileSize
GetModuleFileNameA
GetProcAddress
GetTempPathA
LoadLibraryA
ReadFile
SetFilePointer
VirtualAlloc

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE