2b764fd6b580f7e39c15aa35632630e6_JaffaCakes118 | Triage

Sharing

General

Target

2b764fd6b580f7e39c15aa35632630e6_JaffaCakes118
Size

765KB
MD5

2b764fd6b580f7e39c15aa35632630e6
SHA1

303c553e1b1b451a3a104896dde168c16c5bf942
SHA256

a92685e9379a962d3ec11b278d0d4c2b959f6ec9a0164c07aeeba4ecd9fe696c
SHA512

7440c94d88eaffb971889006584cb50734c03095f2e99b31bf01dfda76715af1a328f6ed40b55ca3fe44ccd8142ac48979269e33262b1d1630fb4c31bfa830a4
SSDEEP

12288:O5DAjOKJxK/XSyQzsVtKvewy+Vm1QNedrtkhPqhk/hfSQuCjv2TCVCgmC:OlKJxK/XSyQz4tKWwy0m1QNeCPH7uYVx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b764fd6b580f7e39c15aa35632630e6_JaffaCakes118

Files

2b764fd6b580f7e39c15aa35632630e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ