4662b3d2e433edd5436ea8e8cddea963_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4662b3d2e433edd5436ea8e8cddea963_JaffaCakes118
Size

53KB
MD5

4662b3d2e433edd5436ea8e8cddea963
SHA1

492fe91298ac96d057a8d496b7d391b76a5d5e71
SHA256

0ab2270c17e7784b3f319a13d78e57b8e23070cd85e25c9cedb4f82d8649014e
SHA512

cc8a14246ee51e8238fe4f078bf563e9aa7457e0050114a3e8ab54f772466c38b2b5c52925ea31656e3c58fe5ae595ff9154c4f470c660dedb3cf4d514b0f617
SSDEEP

768:S6kcFyAgL5acKleKsxX8BLpf/dGbKa1ZghsYzQ6fIOdmJSWPHuG:PHSTCeFxsB9/dDa1aLQyIOdHWPO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4662b3d2e433edd5436ea8e8cddea963_JaffaCakes118

Files

4662b3d2e433edd5436ea8e8cddea963_JaffaCakes118
.exe windows:4 windows x86 arch:x86

399c9f076e8dab08a1e6586d6aa70ea4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
CreateFileA
GetTempPathA
FreeResource
CloseHandle
SizeofResource
LoadResource
WriteFile
LockResource
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_INIT_
Size: 32B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE