19bd23327611906c2adc46358999bb7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19bd23327611906c2adc46358999bb7b_JaffaCakes118
Size

2KB
MD5

19bd23327611906c2adc46358999bb7b
SHA1

991a6592f888450d167c8d75c4536c8f1f12170c
SHA256

ca5335e7dfccd4f0089ad1936bf0be663e5977d03caa63a6fc1560829f7bd916
SHA512

2d4462242a931c0aa533594b6efc25b2bd0ab329a718cbdf030ba1880bccb71ad4c1379ba1a9ed95adc7135f0a8aed2d445c2f031b23d4d8877f9d7684418e83

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19bd23327611906c2adc46358999bb7b_JaffaCakes118

Files

19bd23327611906c2adc46358999bb7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62c86d2c385efa69f0a3310a714f37e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
WinExec
GetTickCount
GetTempPathA
GetProcAddress
LoadLibraryA
ExitProcess
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA

user32

wsprintfA

msvcrt

fopen
??2@YAPAXI@Z
fclose
fscanf
strchr
??3@YAXPAX@Z

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ