37001de8da341b7961b0c61722891e4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37001de8da341b7961b0c61722891e4e_JaffaCakes118
Size

255KB
MD5

37001de8da341b7961b0c61722891e4e
SHA1

566d639aa48fe08989221c2dd01df1c9bec058e7
SHA256

bb710ed305eb32c56301bb204946c096c613d223963b50fe55b59bd799b93a94
SHA512

59dee5fb55509e0c1fbbc811a3e729bd436df2d6069cddfbd6f4128dfd93d968ce5484ce3a1c36d3678f6cd93902b7cbfe313f63705e625ac04662dfbef578cb
SSDEEP

6144:w4eJDvFeKBw8v92A7BBS2c1zvYbkUpNmePU7OfQYXpd+aCAX:m1Bv/S2YYb1AejXpd5X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37001de8da341b7961b0c61722891e4e_JaffaCakes118

Files

37001de8da341b7961b0c61722891e4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ