256a187cbdd19cacc18e48119f2ddc3e_JaffaCakes118 | Triage

Sharing

General

Target

256a187cbdd19cacc18e48119f2ddc3e_JaffaCakes118
Size

5KB
MD5

256a187cbdd19cacc18e48119f2ddc3e
SHA1

b482a21c11fb432c697b4461b75338282c790014
SHA256

bcd005eb3dfd040b3f2fd260bbb155c36aeef36bee32e041b58376448e604d86
SHA512

f4e02b1b0bb4b6e71377498b8adfced2684d408b017ea5c803f46d5d7a6d2a59c3a93f57d379bbf9087aaeb916fc2ffc50123bab1b7246e0d194b0e32911acef
SSDEEP

48:6pxAa4IHTBi7R8jYP7PMknN2i575hqYUYNIBmzArxguAHtNR:gBi7RiYP7PM+4k7Xq7x4zehGtNR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
256a187cbdd19cacc18e48119f2ddc3e_JaffaCakes118

Files

256a187cbdd19cacc18e48119f2ddc3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

10466611123411ee67cbe326ed70b493

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetModuleFileNameA
HeapAlloc
HeapFree
HeapReAlloc

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

Sections

.code
Size: 512B - Virtual size: 191B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ