15460fd44d09cd3d9d1117cc1d2750bc_JaffaCakes118 | Triage

Sharing

General

Target

15460fd44d09cd3d9d1117cc1d2750bc_JaffaCakes118
Size

24KB
MD5

15460fd44d09cd3d9d1117cc1d2750bc
SHA1

69d372be715dbc30d7aa03aa6ed84afc187dd046
SHA256

3adf7267ec0a24d7e96510da5244038c52981bc03253519aa85669cdb4afc7b0
SHA512

2843a877d735248e7c42b108f3a24c5c2e67fac6d6fde1bc1d7bb166e8e57a5f145abc0faa17ba6b7de9bd720d532f132e3c829fe28dea6fb44832e7520b4d1a
SSDEEP

768:Rr9gzArtTNrFuv7tjsOGHJtIXjbv/CQQV:3BrJB4sxp6nvaQQV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15460fd44d09cd3d9d1117cc1d2750bc_JaffaCakes118

Files

15460fd44d09cd3d9d1117cc1d2750bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

35347c755519b7d0311887e16c6cc7d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHAddToRecentDocs
StrRChrIA
StrStrIA

kernel32

CreatePipe
TerminateProcess
VirtualProtect

Sections

.text
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ