JaffaCakes118_1d2adaabf198d26f9cb17e7afc873387 | Triage

Sharing

General

Target

JaffaCakes118_1d2adaabf198d26f9cb17e7afc873387
Size

2.3MB
MD5

1d2adaabf198d26f9cb17e7afc873387
SHA1

6d6501fa2475ccfaa049dea6b996dc757fdfc7b9
SHA256

a51e91ac7de75fb3a814387fb5f45948fa6afd2468db975fcda24889eb99c8a0
SHA512

0e9206e8c5e2adbdd9ee27f246cc951e96f4d3004501abbdcf6fa8ad88f7c2c055b73c4ffb5718b76f111d4bc9c1b5a5f35f7c45333eb87beaa1f793b495d4b9
SSDEEP

49152:Ux6h57Kp1amL0VUCrTASC0xsPDkCpFW7EDlCDcRE0hZPBEvPS:3p6LtwTASCfPDkEdDWeBB9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1d2adaabf198d26f9cb17e7afc873387

Files

JaffaCakes118_1d2adaabf198d26f9cb17e7afc873387
.exe windows:1 windows x86 arch:x86

3c1690902b9efc6dd489276e1f23d6c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
RtlUnwind

crtdll

__GetMainArgs
exit
fclose
feof
fgetc
fopen
fputc
fseek
raise
signal
strcat
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 596B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 692B - Virtual size: 692B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE