373761e7000af03335caddaf45e011a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

373761e7000af03335caddaf45e011a2_JaffaCakes118
Size

11KB
MD5

373761e7000af03335caddaf45e011a2
SHA1

5fe43402d4a6015109176753c669c472e10ddad4
SHA256

643d893e5a2cf24cfb78ad4185b35e62936feac912ba0e54422dcf2fd8980ad0
SHA512

715cf1105e5760a5902afcbdf31427729319bfe00e38ca935ea4a756d8be2c001e173c68461b3d67c58995abc67ad6c02957a8d9633ee993900d2baf73cbf33c
SSDEEP

192:+GgcHPNPFsV+rBX/klO8xPW9dlTupAOw6HhPo2HI7O5mx/HhMIVH:+lcHJ6VQBcY8xPWBuOOJrofx/WE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
373761e7000af03335caddaf45e011a2_JaffaCakes118

Files

373761e7000af03335caddaf45e011a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a13ee2bd542e30b8d805240c3433d2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 167KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ