026884b52127cfe301528a71d3ca71e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

026884b52127cfe301528a71d3ca71e3_JaffaCakes118
Size

3KB
MD5

026884b52127cfe301528a71d3ca71e3
SHA1

9900bff4d6aaa19344b93fd7dea94af5bcf43969
SHA256

c5a37e5e9a8de2d13e5ff9c193878fbde50c223f9ab32f0e45270f5f5c99c215
SHA512

402eb342a308e948d8b6640560a834c2cf742c60f43c8c19e17e9e81eba0eceda9821338c54cf514ae1456aa45dbfc4528928308841191bd4d892a2867ac1d29

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
026884b52127cfe301528a71d3ca71e3_JaffaCakes118

Files

026884b52127cfe301528a71d3ca71e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c73b37e21876e533e96eb5dc541813e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
lstrcatA
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GetModuleFileNameA

user32

wsprintfA

shell32

ShellExecuteA

msvcrt

malloc
free

Sections

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ