2a51cb778d7ca8391a85b844023b0702_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a51cb778d7ca8391a85b844023b0702_JaffaCakes118
Size

1KB
MD5

2a51cb778d7ca8391a85b844023b0702
SHA1

3660d2c2bba0dfa32aee9e776bab6fbc055ce3a6
SHA256

01581ba63a97b1233c24b7b852fb21797fb2eb22204834105241393b575aaf60
SHA512

ba4fc2fc26724e96ac1d8fdb6ae2f87e08bc627d84a1a11ef824d7e90d22fe2813950c1b2c36c85ddb1828d7fa9b575976e58b84bfdb4bf9064d30d924cb5438

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a51cb778d7ca8391a85b844023b0702_JaffaCakes118

Files

2a51cb778d7ca8391a85b844023b0702_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff0a7054697ad960b40e212a03ac9670

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
CreateFileA
EnumResourceNamesA
GetTempPathA
CloseHandle
SizeofResource
LoadResource
WriteFile
LockResource
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 384B - Virtual size: 374B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 362B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_INIT_
Size: 32B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ