4670a9753d3030d4a35a3afc49a0e3c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4670a9753d3030d4a35a3afc49a0e3c0_JaffaCakes118
Size

940KB
MD5

4670a9753d3030d4a35a3afc49a0e3c0
SHA1

21a98e72ebc4b2100257e473e90ab333a872e4cc
SHA256

ee60f78e39a29a09f719e3c8b3c5bef3552c0c0ed7e758544b711c24bc0afc4e
SHA512

a26415223bb4d37976d6c49872329045eb452a6e70b8bd1c0735b7142e5e1978245def8321243fe093caf3a0bb935f6ea7484bb9ed4251cc490c7da8dd5fb936
SSDEEP

3072:FaBTDMknZ9mdLGj0nnnnnnnnnnnnnnN0SUIU4Ok3PIlTzF:sBvfHVpIzOkqzF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4670a9753d3030d4a35a3afc49a0e3c0_JaffaCakes118

Files

4670a9753d3030d4a35a3afc49a0e3c0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

d0dd355e7007da5e0bff71c28a5e3c9c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetModuleHandleA
GetTempPathA
LoadResource
LockResource
RtlZeroMemory
SizeofResource
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.data
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 406B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 937KB - Virtual size: 937KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ