2325d720c36d304c913c3b9cde515fa2_JaffaCakes118 | Triage

Sharing

General

Target

2325d720c36d304c913c3b9cde515fa2_JaffaCakes118
Size

3KB
MD5

2325d720c36d304c913c3b9cde515fa2
SHA1

374006a22fdae34ea7eef0f0d87f4602e5924f9d
SHA256

e899da463eab7373786ea94f3ba20f4cf5c31c8d12932d6bafb021216fa5a2e8
SHA512

045a47c92a747dc8ff816bdb6e91eeba2cf13451fcdffcdf470e0e838d8e786e5ae7f3238a2772ded389d56e41b1a56f63887841e6a601655cdd793511de68f2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2325d720c36d304c913c3b9cde515fa2_JaffaCakes118

Files

2325d720c36d304c913c3b9cde515fa2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5fad22e5adad5a93551b54e9ca0dff7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
ExitThread
GetModuleHandleA
OpenProcess
Sleep
WinExec
WriteProcessMemory
ResumeThread
GetPriorityClass
CloseHandle
VirtualAlloc
VirtualFree
GetCurrentProcessId
SetLastError
CreateRemoteThread

user32

GetWindowThreadProcessId
FindWindowA

urlmon

URLDownloadToFileA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE