2c1aba8fca7604ce6b7c99fce8aaf769_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c1aba8fca7604ce6b7c99fce8aaf769_JaffaCakes118
Size

9KB
MD5

2c1aba8fca7604ce6b7c99fce8aaf769
SHA1

113cfc185073898d9c8c813505bd00e57c4d00a0
SHA256

14a457dc185a3846bda869570f59f46e48b7da4dcfd96d309f41a478401bfc21
SHA512

5414be7692821204b57202c3266469ffc2f46b2e771a772c776a58ecffc95dff218ca5f515518be0c0c5895f27f47ef67c2118c8056dea9bdd4d5766e629f63d
SSDEEP

48:iYzDkPPDrJznMEXiLXWQx89cyoLjp7doBMho6bBM3N3KzwCqDrK7ZZz02wCNmv5A:1kPbrJRSlf5q2hxINN+K2mv541

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c1aba8fca7604ce6b7c99fce8aaf769_JaffaCakes118

Files

2c1aba8fca7604ce6b7c99fce8aaf769_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

e2bf10fcb6977cb97a081d462a036b6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
ReadFile
SetFilePointer
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 866B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ