288872a3c832a54a16704e17699f9eca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

288872a3c832a54a16704e17699f9eca_JaffaCakes118
Size

3KB
MD5

288872a3c832a54a16704e17699f9eca
SHA1

802b067000012b090d99ed413f11d1e2a4cf81b9
SHA256

ad0a770d29967b9543f4a36f3e489168897493bca84e4fc45d45a5fea7626398
SHA512

061b496cf4712444129da8ca0220caf936bce32bf9f471f25ed0d706f78b40c7d542b7c61d3e3ed36303f6cacbc9c94046d27fc07dac957850eb7d3e62dcecc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
288872a3c832a54a16704e17699f9eca_JaffaCakes118

Files

288872a3c832a54a16704e17699f9eca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22799a44af74c45c29cdfbb7e97606a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
MessageBoxA

kernel32

GetCommandLineA
WriteFile
CreateFileA
FindNextFileA
lstrcmpA
FindFirstFileA
GetProcAddress
LoadLibraryA
lstrcpyA
lstrlenA
CloseHandle
ReadFile
SetFilePointer

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 372B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE