38c4412c514b792bbff14707fa241d72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38c4412c514b792bbff14707fa241d72_JaffaCakes118
Size

2KB
MD5

38c4412c514b792bbff14707fa241d72
SHA1

36209e3c379f447fad66a1a57b89649a60316599
SHA256

4c8e31fa44be426b0edd6d82f3823faa537ef7574b11747c65080455257f2d3e
SHA512

a406edcd01101867d8d76eba471936d2270fee2f0f98323689ba6a5c70db982bb2d75b3c5379c2512539b0c37fc6cec71b5040d46692bee51704a726f55a74f7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38c4412c514b792bbff14707fa241d72_JaffaCakes118

Files

38c4412c514b792bbff14707fa241d72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d7f742d871d9c8b92f767919f401b18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
WinExec
DeleteFileA
ExitProcess
GetLastError
CreateMutexA

msvcrt

_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

urlmon

URLDownloadToFileA

Sections

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE