14f429d441bf04e9f28bc27c68ad41f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14f429d441bf04e9f28bc27c68ad41f3_JaffaCakes118
Size

70KB
MD5

14f429d441bf04e9f28bc27c68ad41f3
SHA1

cd098562482905793356ebd03db69095c09e02b2
SHA256

c5815bb0796e28a016c24152cb70b7ea645b5d46ae3cf03716cdc36ed412b0fb
SHA512

326a4ff4a041085e9a60a799136ee22c3aa07973f15e508b26b8dd8756f2c14cc6359900973e8f26cc6912adf5549de66ac9587f3375d6e270148ecf7793d0b2
SSDEEP

1536:W3EwOnbNQKLjWDyy1o5RepJUEbooPRrKKRSq6HnX:s2NQKPWDyDRepJltZrpRSfHX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14f429d441bf04e9f28bc27c68ad41f3_JaffaCakes118

Files

14f429d441bf04e9f28bc27c68ad41f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8310f2bedfbadb2be6a64535b152b1b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
EnumResourceNamesA
ExitProcess
FindResourceA
GetTempPathA
LoadResource
LockResource
SizeofResource
WriteFile
lstrcatA
lstrcpyA
lstrlenA

shell32

ShellExecuteA

user32

CharLowerBuffA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE