360b165fc240398163046ce5f497d6d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

360b165fc240398163046ce5f497d6d9_JaffaCakes118
Size

2KB
MD5

360b165fc240398163046ce5f497d6d9
SHA1

ca24644c087850345b79d7e8a2e0b79f6e871cc1
SHA256

99697fb23e13a783d4a2c313122a11a01fed09c48c5b037508a0b2eec0b38ef6
SHA512

9c8dc0e4600155a2e31779b1c167a0f348a210da62038f8fe5ab6fd8c217dd2a68c88adf8ffc0a2415b1eb41ea96343d01e9d65aa4d1fe49beed4c8c4cc5a588

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
360b165fc240398163046ce5f497d6d9_JaffaCakes118

Files

360b165fc240398163046ce5f497d6d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1f41127e51c4a09fcb0aec80965d5ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetTempPathA
lstrcatA
CreateFileA
FindResourceA
LoadResource
SizeofResource
WriteFile
CloseHandle
LoadLibraryA
GetProcAddress
EnumResourceNamesA
ExitProcess

user32

LoadIconA
CharLowerA

Sections

.text
Size: 512B - Virtual size: 386B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 784KB - Virtual size: 784KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ