461d493f3cd94fb46c30aa9cd9652051_JaffaCakes118 | Triage

Sharing

General

Target

461d493f3cd94fb46c30aa9cd9652051_JaffaCakes118
Size

501KB
MD5

461d493f3cd94fb46c30aa9cd9652051
SHA1

63013a67ff2e677cfe90d9e2a47b9403975fa74e
SHA256

ac34294ef70daf86776ecf5e41bb4ed159c5988e07fea600d47663b8ca965ea9
SHA512

9e013091e854d47b289577add4ee36c51810937010a95d50798779a348778907d6bf3e8d2b21f7ac2b83de6bedd1af46fe5645a99b0a486e9f18ea944fe949f4
SSDEEP

12288:73va5XhbwIEzYYywP7RYvXog1L0nockSHQMC6mn+oClj:7GwIEUYyAYggZ0odSHphm+Plj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
461d493f3cd94fb46c30aa9cd9652051_JaffaCakes118

Files

461d493f3cd94fb46c30aa9cd9652051_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3abb48ffd439394547bc1b88aa652127

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
ExitProcess
ReadFile
WriteFile
GetLastError
SetFilePointer
DeleteFileA
GetModuleFileNameA
CreateDirectoryA
lstrlenA
GetTempFileNameA
lstrcatA
GetWindowsDirectoryA
GetTempPathA
GetStdHandle
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
lstrcmpA
CreateFileA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ