2652ebf1ee5e04cd2705bc1bb94ee94f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2652ebf1ee5e04cd2705bc1bb94ee94f_JaffaCakes118
Size

9KB
MD5

2652ebf1ee5e04cd2705bc1bb94ee94f
SHA1

b955628d7f45ea19ea3cf8829e00cb8c9bdac124
SHA256

c5a6a9616fcac4bcb4785643f6b25a30e7b95cbb137f213eff589e6080286a3a
SHA512

948029ec30ee1b81c95dfe9ff578bdda7c7e517ef01cc43569282d8b5e487b49def9f4acdc75aef909386ceae88a153e01edca2608440fe8516c5904f8fdcabe
SSDEEP

192:O6dkta2ZwBKrXTKBQVZ3o1W/JxyM9/ezZoIcK4Z:ZdbuvvxdIK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2652ebf1ee5e04cd2705bc1bb94ee94f_JaffaCakes118

Files

2652ebf1ee5e04cd2705bc1bb94ee94f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22afda456baef3e7c702ad64736c0ed0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDoubleClickTime

shell32

ShellExecuteA

kernel32

GetModuleHandleA
lstrcpyA
lstrcatA
LoadLibraryA
GetVersion
ExitProcess
GetCommandLineA
GetProcAddress
GetTickCount

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE