3de115cd402223f129c1759fc185a8f2_JaffaCakes118 | Triage

Sharing

General

Target

3de115cd402223f129c1759fc185a8f2_JaffaCakes118
Size

197KB
MD5

3de115cd402223f129c1759fc185a8f2
SHA1

f2a30a1f93820689a053f694afbc4128a14952d7
SHA256

cf13900c1b4071ebcce38e3aaa6a859ed9ea76193cc08dc5e080eb9432f35837
SHA512

c991d04d161c6cfa5f40311bb6578087c5ce010713709dd7c97f16f77ffa29b1599fb8c195b061f4e84ada8a1372f6a3f6d0d883bfa767b2a7e2175517874796
SSDEEP

3072:vQ7pWdHCS+lwr3D1LeAOGGuL2+MSpFRw+yEj8JwGlEdUcKGvI6:vYWdHCSX1LWGGuC3Sppj8GGlEdGGQ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3de115cd402223f129c1759fc185a8f2_JaffaCakes118

Files

3de115cd402223f129c1759fc185a8f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1706d2a56f4c1061417ec650039950c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetSpecialFolderPathA

kernel32

CloseHandle
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
LockResource
LoadResource
GetModuleHandleA
FindResourceA
ExitProcess
CreateFileA

Sections

.text
Size: 1024B - Virtual size: 602B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE