39ab78cfbdc975662f789720b3598c1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39ab78cfbdc975662f789720b3598c1c_JaffaCakes118
Size

3KB
MD5

39ab78cfbdc975662f789720b3598c1c
SHA1

b527ceb47a247da7775916ef9eac27e937e8e220
SHA256

425a0f504f96751b050a3147510bc2187794d7f6ad4988b067abe251d372ad1e
SHA512

89391cc4f39be07f64fad06bccd92bf55d91f2cad644965f0b66d6de3567c8860c5b19f88f7424f3a320539dd326f2d83d2141b11b815e1905df241932aeff34

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39ab78cfbdc975662f789720b3598c1c_JaffaCakes118

Files

39ab78cfbdc975662f789720b3598c1c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

28ce0db4206e92ed8f7dd95c6ec12fce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

WinExec
ExitProcess
GetTempPathA

shlwapi

PathFindFileNameA
PathCombineA

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ